Na Yang created HIVE-11029:
------------------------------
Summary: hadoop.proxyuser.mapr.groups does not work to restrict
the groups that can be impersonated
Key: HIVE-11029
URL: https://issues.apache.org/jira/browse/HIVE-11029
Project: Hive
Issue Type: Bug
Components: HiveServer2
Affects Versions: 1.2.0, 1.0.0, 0.14.0, 0.13.0
Reporter: Na Yang
Assignee: Na Yang
In the core-site.xml, the hadoop.proxyuser.<user>.groups specifies the user
groups which can be impersonated by the HS2 <user>. However, this does not work
properly in Hive.
In my core-site.xml, I have the following configs:
<property>
<name>hadoop.proxyuser.mapr.hosts</name>
<value>*</value>
</property>
<property>
<name>hadoop.proxyuser.mapr.groups</name>
<value>root</value>
</property>
I would expect with this configuration that 'mapr' can impersonate only members
of the Unix group 'root'. However if I submit a query as user 'jon' the query
is running as user 'jon' even though 'mapr' should not be able to impersonate
this user.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)