[
https://issues.apache.org/jira/browse/HIVE-5353?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eugene Koifman updated HIVE-5353:
---------------------------------
Description:
HIVE-5133 adds support for secure metastore access using delegation tokens.
This is needed for example when a pig job is submitted via WebHcat, and the Pig
script uses HCat, which has to access metadata and thus the metastore.
When the job is complete the delegation token should be cancelled. HIVE-5133
implements it as an OutputCommitter but this requires relevant jars to be
shipped to the node where TempletonControllerJob is run. This makes
configuration more difficult.
Since Hive (and thus all the necessary jars for token cancellation) must be
installed on the same node where WebHCat is running, the token can be cancelled
from WebHCat when it receives a callback from Hadoop that the job is finished.
Thus no additional jars need to be shipped anywhere.
was:HIVE-5133 adds support for secure metastore access
> job submission that requires access to metastore should not require
> additional jars to be shipped to target node
> ----------------------------------------------------------------------------------------------------------------
>
> Key: HIVE-5353
> URL: https://issues.apache.org/jira/browse/HIVE-5353
> Project: Hive
> Issue Type: Bug
> Components: WebHCat
> Affects Versions: 0.12.0
> Reporter: Eugene Koifman
> Assignee: Eugene Koifman
> Fix For: 0.13.0
>
>
> HIVE-5133 adds support for secure metastore access using delegation tokens.
> This is needed for example when a pig job is submitted via WebHcat, and the
> Pig script uses HCat, which has to access metadata and thus the metastore.
> When the job is complete the delegation token should be cancelled. HIVE-5133
> implements it as an OutputCommitter but this requires relevant jars to be
> shipped to the node where TempletonControllerJob is run. This makes
> configuration more difficult.
> Since Hive (and thus all the necessary jars for token cancellation) must be
> installed on the same node where WebHCat is running, the token can be
> cancelled from WebHCat when it receives a callback from Hadoop that the job
> is finished. Thus no additional jars need to be shipped anywhere.
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
