[
https://issues.apache.org/jira/browse/HIVE-13391?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15229133#comment-15229133
]
Siddharth Seth commented on HIVE-13391:
---------------------------------------
[~sershe] - TaskRunnerCallable already creates a UGI (taskUgi) with the tokens
which are passed in over the RPC request. This is passed in to the actual task
executor and used to execute the entire task. I think it will be a lot simpler
to setup this UGI instances appropriately, instead of modifying TezProcessor,
LlapInputFormat, Orc* etc. The entire task runs in the context of this UGI.
I don't think we need to retain the token sending behaviour. However, if we are
retaining it, we should stop sending the tokens if the LLAP instances are
configured to run with keytabs.
> add an option to LLAP to use keytab to authenticate to read data
> ----------------------------------------------------------------
>
> Key: HIVE-13391
> URL: https://issues.apache.org/jira/browse/HIVE-13391
> Project: Hive
> Issue Type: Bug
> Reporter: Sergey Shelukhin
> Assignee: Sergey Shelukhin
> Attachments: HIVE-13391.01.patch, HIVE-13391.02.patch,
> HIVE-13391.patch
>
>
> This can be used for non-doAs case to allow access to clients who don't
> propagate HDFS tokens.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
