HADOOP-7987. Support setting the run-as user in unsecure mode.
git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/trunk@1235945 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
parent
9d1621da52
commit
a00640a3db
|
@ -85,6 +85,8 @@ Trunk (unreleased changes)
|
||||||
|
|
||||||
HADOOP-7968. Errant println left in RPC.getHighestSupportedProtocol (Sho Shimauchi via harsh)
|
HADOOP-7968. Errant println left in RPC.getHighestSupportedProtocol (Sho Shimauchi via harsh)
|
||||||
|
|
||||||
|
HADOOP-7987. Support setting the run-as user in unsecure mode. (jitendra)
|
||||||
|
|
||||||
BUGS
|
BUGS
|
||||||
|
|
||||||
HADOOP-7851. Configuration.getClasses() never returns the default value.
|
HADOOP-7851. Configuration.getClasses() never returns the default value.
|
||||||
|
|
|
@ -80,6 +80,7 @@ public class UserGroupInformation {
|
||||||
* Percentage of the ticket window to use before we renew ticket.
|
* Percentage of the ticket window to use before we renew ticket.
|
||||||
*/
|
*/
|
||||||
private static final float TICKET_RENEW_WINDOW = 0.80f;
|
private static final float TICKET_RENEW_WINDOW = 0.80f;
|
||||||
|
static final String HADOOP_USER_NAME = "HADOOP_USER_NAME";
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* UgiMetrics maintains UGI activity statistics
|
* UgiMetrics maintains UGI activity statistics
|
||||||
|
@ -137,7 +138,16 @@ public class UserGroupInformation {
|
||||||
LOG.debug("using kerberos user:"+user);
|
LOG.debug("using kerberos user:"+user);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
// if we don't have a kerberos user, use the OS user
|
//If we don't have a kerberos user and security is disabled, check
|
||||||
|
//if user is specified in the environment or properties
|
||||||
|
if (!isSecurityEnabled() && (user == null)) {
|
||||||
|
String envUser = System.getenv(HADOOP_USER_NAME);
|
||||||
|
if (envUser == null) {
|
||||||
|
envUser = System.getProperty(HADOOP_USER_NAME);
|
||||||
|
}
|
||||||
|
user = envUser == null ? null : new User(envUser);
|
||||||
|
}
|
||||||
|
// use the OS user
|
||||||
if (user == null) {
|
if (user == null) {
|
||||||
user = getCanonicalUser(OS_PRINCIPAL_CLASS);
|
user = getCanonicalUser(OS_PRINCIPAL_CLASS);
|
||||||
if (LOG.isDebugEnabled()) {
|
if (LOG.isDebugEnabled()) {
|
||||||
|
|
|
@ -0,0 +1,32 @@
|
||||||
|
/**
|
||||||
|
* Licensed to the Apache Software Foundation (ASF) under one or more
|
||||||
|
* contributor license agreements. See the NOTICE file distributed with this
|
||||||
|
* work for additional information regarding copyright ownership. The ASF
|
||||||
|
* licenses this file to you under the Apache License, Version 2.0 (the
|
||||||
|
* "License"); you may not use this file except in compliance with the License.
|
||||||
|
* You may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing, software
|
||||||
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||||
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||||
|
* License for the specific language governing permissions and limitations under
|
||||||
|
* the License.
|
||||||
|
*/
|
||||||
|
|
||||||
|
package org.apache.hadoop.security;
|
||||||
|
|
||||||
|
import java.io.IOException;
|
||||||
|
import org.junit.Assert;
|
||||||
|
import org.junit.Test;
|
||||||
|
|
||||||
|
public class TestUserFromEnv {
|
||||||
|
|
||||||
|
@Test
|
||||||
|
public void testUserFromEnvironment() throws IOException {
|
||||||
|
System.setProperty(UserGroupInformation.HADOOP_USER_NAME, "randomUser");
|
||||||
|
Assert.assertEquals("randomUser", UserGroupInformation.getLoginUser()
|
||||||
|
.getUserName());
|
||||||
|
}
|
||||||
|
}
|
Loading…
Reference in New Issue