Uploaded image for project: 'Apache Drill'
  1. Apache Drill
  2. DRILL-5664

Enable security for Drill HiveStoragePlugin based on a config parameter

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 1.11.0
    • None
    • None
    • None

    Description

      For enabling security on DrillClient to Drillbit and Drillbit to Drillbit channel we have a configuration. But this doesn't ensure that Storage Plugin channel is also configured with security turned on. For example: When security is enabled on Drill side then HiveStoragePlugin which Drill uses doesn't open secure channel to HiveMetastore by default unless someone manually change the HiveStoragePluginConfig.

      With this JIRA we are introducing a new config option
      security.storage_plugin.enabled: false based on which Drill can update the StoragePlugin config's to enable/disable security. When this config is set to true/false then for now Drill will update the HiveStoragePlugin config to set the value of hive.metastore.sasl.enabled as true/false. So that when Drill connects to Metastore it does so in secured way. But if an user tries to update the config later which is opposite of what the Drill config says then we will log a warning before updating.
      Later the same login can be extended for all the other storage plugin's as well to do respective setting change based on the configuration on Drill side.

      Attachments

        Issue Links

          Activity

            People

              shamirwasia Sorabh Hamirwasia
              shamirwasia Sorabh Hamirwasia
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated: