dianping / cosmos-hive

3 stars 5 forks source link

HIVE-3807 Hive authorization should use short username when Kerberos authentication #16

Closed yixzhang closed 11 years ago

yixzhang commented 11 years ago

https://issues.apache.org/jira/browse/HIVE-3807

zhuguangbin commented 11 years ago

hive的kerberos认证时采用principal的full name而不是shortname进行认证,比如guangbin.zhu@DIANPING.COM,而不是guangbin.zhu。但Hadoop HDFS、MapReduce以及HBase都是采用shortname进行ACL或者authorization。 已在cosmos-hive0.9.0中修复这个bug。see: https://github.com/dianping/hive/commit/2bea90afda47c7962b38d4620a19d2df4b0e63bc