Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Phoenix doAs is not working

Highlighted

Phoenix doAs is not working

New Contributor

I am trying to achieve impersonation in Phoenix and discovered that doAs is  not working as expected. The following parameter has been added as per documentation : https://phoenix.apache.org/server.html

 

phoenix.queryserver.withRemoteUserExtractor=true in Ambari -> HBase -> Configs

hadoop.proxyuser.<user_name>.groups=*

hadoop.proxyuser.<user_name>.hosts=*

 

<user_name> = service_account.svc

 

 

 

./sqlline-thin.py http://  server001.organization.com:8765;principal=service_account.svc@ORGANIZATION.COM;keytab=/etc/security/keytabs/service_account.svc.headless.keytab?doAs=user_to_impersonate

 

Phoenix version  :  4.7

 

I am able to authenticate but authorization is not working. The queries return values with permission level of service_account.svc

 

Please suggest what else I can check. Any pointers will be helpful.

 

Thanks in advance... 

Don't have an account?
Coming from Hortonworks? Activate your account here