Storm impersonation is not working. Appreciate any suggestions.

rakanchi — Fri, 30 Jun 2017 19:07:13 GMT

When we submit Storm toplogy as any user, it always goes as strom user I guess impersonation is not happening.

Re: Storm impersonation is not working. Appreciate any suggestions.

nyadav — Fri, 30 Jun 2017 19:50:59 GMT

You need to configure storm_jaas.conf with client properties, and pass to storm topology

storm_jaas.conf 
StormClient { 
com.sun.security.auth.module.Krb5LoginModule required 
useKeyTab=true 
keyTab="/etc/security/keytabs/hdfs.headless.keytab" 
storeKey=true 
useTicketCache=false 
serviceName="nimbus" 
principal="hdfs@example.com"; 
}; 
Client { 
com.sun.security.auth.module.Krb5LoginModule required 
useKeyTab=true 
keyTab="/etc/security/keytabs/hdfs.headless.keytab" 
storeKey=true 
useTicketCache=false 
serviceName="zookeeper" 
principal="hdfs@example.com"; 
};

And pass jaas file with -c option

storm jar /usr/hdp/current/storm-client/contrib/storm-starter/storm-starter-*-jar-with-dependencies.jar storm.starter.WordCountTopology wordcount -c java.security.auth.login.config=/my/custom/jaas/path

Let me know if it helps!

Re: Storm impersonation is not working. Appreciate any suggestions.

rkandula — Tue, 29 Aug 2017 04:55:35 GMT

in your /home/<user>/.storm/storm.yaml file,need to specify following property

supervisor.run.worker.as.user : true

question Re: Storm impersonation is not working. Appreciate any suggestions. in Support Questions

Storm impersonation is not working. Appreciate any suggestions.

Re: Storm impersonation is not working. Appreciate any suggestions.

Re: Storm impersonation is not working. Appreciate any suggestions.