mirror of
https://github.com/apache/impala.git
synced 2026-01-09 06:05:09 -05:00
We should be using the short name of a Kerberos principal (e.g. user/fully.qualified.domain@realm.com) or LDAP username (e.g. user@domain) when checking group membership in RequestPoolService. Right now we call UserGroupInformation.createRemoteUser() with the full user name and it will throw an exception. Change-Id: I39d849627cb49760807504d66109c05b7a399482 Reviewed-on: http://gerrit.ent.cloudera.com:8080/2288 Reviewed-by: Matthew Jacobs <mj@cloudera.com> Tested-by: jenkins (cherry picked from commit 0005da9cb71f5a4a4ed6bb1dfcd74f8526cd8316) Reviewed-on: http://gerrit.ent.cloudera.com:8080/2305