Просмотр исходного кода

AMBARI-17641. Add storm impersonation authorized along with default ACL. (UT fix) (smohanty)

Sumit Mohanty 9 лет назад
Родитель
Сommit
11a80e3abb

+ 2 - 0
ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/storm-site.xml

@@ -89,6 +89,7 @@
       To ensure only authorized users can perform impersonation you should start nimbus with nimbus.impersonation.authorizer set to org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer.
       A storm client may submit requests on behalf of another user. For example, if a userX submits an oozie workflow and as part of workflow execution if user oozie wants to submit a topology on behalf of userX it can do so by leveraging the impersonation feature.In order to submit topology as some other user , you can use StormSubmitter.submitTopologyAs API. Alternatively you can use NimbusClient.getConfiguredClientAs to get a nimbus client as some other user and perform any nimbus action(i.e. kill/rebalance/activate/deactivate) using this client.
     </description>
+    <on-ambari-upgrade add="false"/>
   </property>
   <property>
     <name>nimbus.impersonation.acl</name>
@@ -106,5 +107,6 @@
         groups:
             [comma separated list of groups whose users impersonating_user2 is allowed to impersonate]
     </description>
+    <on-ambari-upgrade add="false"/>
   </property>
 </configuration>