mirror of
https://github.com/apache/impala.git
synced 2025-12-25 02:03:09 -05:00
6f9a7622ed
user that does not delegate another user This change improves LDAP checking in the Hiveserver2 API where previously LDAP filter checks were run on the user principal received in Kerberos authentication, but after the modification they are run on the short username taken from the Kerberos principal. Tested with new custom cluster tests. Change-Id: I0141cd341cda84ed40cd72f8a038c8d5a215e5e1 Reviewed-on: http://gerrit.cloudera.org:8080/20421 Tested-by: Impala Public Jenkins <impala-public-jenkins@cloudera.com> Reviewed-by: Norbert Luksa <norbert.luksa@cloudera.com>