Storm impersonation is not working. Appreciate any suggestions.

[#1]

When we submit Storm toplogy as any user, it always goes as strom user I guess impersonation is not happening.

[#2 · Accepted solution]

@rakanchi

You need to configure storm_jaas.conf with client properties, and pass to storm topology

storm_jaas.conf 
StormClient { 
com.sun.security.auth.module.Krb5LoginModule required 
useKeyTab=true 
keyTab="/etc/security/keytabs/hdfs.headless.keytab" 
storeKey=true 
useTicketCache=false 
serviceName="nimbus" 
principal="hdfs@example.com"; 
}; 
Client { 
com.sun.security.auth.module.Krb5LoginModule required 
useKeyTab=true 
keyTab="/etc/security/keytabs/hdfs.headless.keytab" 
storeKey=true 
useTicketCache=false 
serviceName="zookeeper" 
principal="hdfs@example.com"; 
}; 

And pass jaas file with -c option

storm jar /usr/hdp/current/storm-client/contrib/storm-starter/storm-starter-*-jar-with-dependencies.jar storm.starter.WordCountTopology wordcount -c java.security.auth.login.config=/my/custom/jaas/path

Let me know if it helps!

[#3]

in your /home/<user>/.storm/storm.yaml file,need to specify following property

supervisor.run.worker.as.user : true