Apache Drill Impersonation -

-

i'm trying build in security on our drill (1.6.0) system. managed security user authentication work(jpam explained in documentation), impersonation not seem work. seems execute , fetch via the admin user regardless of has logged in via odbc.

my drill-override.conf file configured follows:

  drill.exec: {   cluster-id: "drillbits1",   zk.connect: "localhost:2181",   impersonation: {     enabled: true,     max_chained_user_hops: 3   },   security.user.auth {       enabled: true,       packages += "org.apache.drill.exec.rpc.user.security",       impl: "pam",       pam_profiles: [ "sudo", "login" ]     } }

we using drill on 1 server, therefore i'm running drill-embedded start things up. troubleshooting: 

root@srv001:/opt/apache-drill-1.6.0# bin/sqlline -u "jdbc:drill:schema=dfs;zk=localhost:2181;impersonation_target=duser001" -n entryuser -p entryuserpassword         error: failure in connecting drill: org.apache.drill.exec.rpc.rpcexception: failure setting zk client.  (state=,code=0)        java.sql.sqlexception: failure in connecting drill:  org.apache.drill.exec.rpc.rpcexception: failure setting zk client.         @ org.apache.drill.jdbc.impl.drillconnectionimpl.<init> (drillconnectionimpl.java:159)         @ org.apache.drill.jdbc.impl.drilljdbc41factory.newdrillconnection(drilljdbc41factory.java:64)         @ org.apache.drill.jdbc.impl.drillfactory.newconnection(drillfactory.java:69)         @ net.hydromatic.avatica.unregistereddriver.connect(unregistereddriver.java:126)         @ org.apache.drill.jdbc.driver.connect(driver.java:72)         @ sqlline.databaseconnection.connect(databaseconnection.java:167)         @ sqlline.databaseconnection.getconnection(databaseconnection.java:213)         @ sqlline.commands.connect(commands.java:1083)         @ sqlline.commands.connect(commands.java:1015)         @ sun.reflect.nativemethodaccessorimpl.invoke0(native method)         @ sun.reflect.nativemethodaccessorimpl.invoke(nativemethodaccessorimpl.java:57)         @ sun.reflect.delegatingmethodaccessorimpl.invoke(delegatingmethodaccessorimpl.java:43)         @ java.lang.reflect.method.invoke(method.java:606)         @ sqlline.reflectivecommandhandler.execute(reflectivecommandhandler.java:36)         @ sqlline.sqlline.dispatch(sqlline.java:742)         @ sqlline.sqlline.initargs(sqlline.java:528)         @ sqlline.sqlline.begin(sqlline.java:596)         @ sqlline.sqlline.start(sqlline.java:375)         @ sqlline.sqlline.main(sqlline.java:268)         caused by: org.apache.drill.exec.rpc.rpcexception: failure setting zk client.         @ org.apache.drill.exec.client.drillclient.connect(drillclient.java:200)         @ org.apache.drill.jdbc.impl.drillconnectionimpl.<init>(drillconnectionimpl.java:151)         ... 18 more     caused by: java.io.ioexception: failure connect zookeeper cluster service within allotted time of 10000 milliseconds.         @ org.apache.drill.exec.coord.zk.zkclustercoordinator.start(zkclustercoordinator.java:123)         @ org.apache.drill.exec.client.drillclient.connect(drillclient.java:198)         ... 19 more

any ideas on this?

i have looked @ doing own built in security, i'm not able retrieve username sql query. have tried following without luck: 

current_user()   user()    session_user()

any ideas on approach?


Comments

Post a Comment

Popular posts from this blog

Load Balancing in Bluemix using custom domain and DNS SRV records -

-
i'm trying load balancing of application in bluemix using custom domain , srv record in dns manager. created own doamin ccbluemix.dynu.com , added custom domain bluemix. created application in region , created route custom domain myapp.ccbluemix.dynu.com deployed same application in uk region , created route custom domain myapp.ccbluemix.dynu.com there well. now whenever user hits route want load balancing between , uk region alternate requests served , uk regions. for created srv records like _http._tcp.ccbluemix.dynu.com srv eu-gb.mybluemix.net [priority: 0] [weight: 50] 10 _http._tcp.ccbluemix.dynu.com srv mybluemix.net [priority: 0] [weight: 50] 10 but nothing happening , i'm not able access application using custom route @ all. if create 'a' record cc-load-bal-app.ccbluemix.dynu.com 75.126.81.68 i can access app using custom route ends hitting server. how can achieve load balancing using srv records? wrong creating srv records here? i read ne...
Read more

oracle - pls-00402 alias required in select list of cursor to avoid duplicate column names -

-
my cursor : select xzis.msisdn msisdn, xzis.in_account_number in_account_number xxobw_zte_in_sync xzis not exists (select 1 hz_contact_points hcp, hz_cust_accounts hca hcp.owner_table_id = hca.party_id , hcp.owner_table_name = 'hz_parties' , hcp.phone_number = substr (xzis.msisdn, -8) , nvl (hca.attribute12, 'nil') = xzis.in_account_number); i have given alias columns, still facing issue. suggestions? it's cursor. 1 has no such problems. problem is, when you're joining 2 tables, or apply wrong aliases in subselect, cursor may @ end return 2 columns same name/alias. the problem not need alias, no 2 columns can have same alias (the name counting alias, when no alias given). apparently has happened, far can tell, it's ...
Read more

python - Consider setting $PYTHONHOME to <prefix>[:<exec_prefix>] error -

-
Image
i getting same error when python manage.py runserver. there no such error when have ubuntu 15.10. got started when upgraded ubuntu 16.04. question might duplicate have tried solution provided question have applied command dpkg --configure -a, have done apt-get update,upgrade,dist-upgrade, clean, -f install. have reinstalled python2.7 , python3 no success though. here screenshot while trying run django application i got after re-installing python please me? bashrc file # ~/.bashrc: executed bash(1) non-login shells. # see /usr/share/doc/bash/examples/startup-files (in package bash-doc) # examples # if not running interactively, don't case $- in *i*) ;; *) return;; esac export pythonhome="/usr/bin/python" echo $virtualenvwrapper_python echo 'tushant' # don't put duplicate lines or lines starting space in history. # see bash(1) more options histcontrol=ignoreboth # append history file, don't overwrite shopt -s histappend # setting h...
Read more