File tree Expand file tree Collapse file tree 1 file changed +5
-3
lines changed
kyuubi-server/src/main/scala/org/apache/kyuubi/server Expand file tree Collapse file tree 1 file changed +5
-3
lines changed Original file line number Diff line number Diff line change @@ -44,9 +44,11 @@ class KinitAuxiliaryService() extends AbstractService("KinitAuxiliaryService") {
4444 kinitMaxAttempts = conf.get(KyuubiConf .KINIT_MAX_ATTEMPTS )
4545
4646 require(keytab.nonEmpty && principal.nonEmpty, " principal or keytab is missing" )
47- if (conf.get(KyuubiConf .ENGINE_DO_AS_ENABLED ) && conf.get(KyuubiConf .SESSION_LOCAL_DIR_ALLOW_LIST ).isEmpty) {
48- warn(s " User impersonation is enabled, but ${KyuubiConf .SESSION_LOCAL_DIR_ALLOW_LIST } is unset. " +
49- s " We strongly recommend to configure the allowed local dir list to exclude any credential including keytab. " )
47+ if (conf.get(KyuubiConf .ENGINE_DO_AS_ENABLED ) &&
48+ conf.get(KyuubiConf .SESSION_LOCAL_DIR_ALLOW_LIST ).isEmpty) {
49+ warn(s " User impersonation is enabled, but ${KyuubiConf .SESSION_LOCAL_DIR_ALLOW_LIST }" +
50+ " is unset. We strongly recommend to configure the allowed local dir list" +
51+ " to exclude any credential including keytab." )
5052 }
5153 UserGroupInformation .loginUserFromKeytab(principal.get, keytab.get)
5254 val krb5Conf = Option (System .getProperty(" java.security.krb5.conf" ))
You can’t perform that action at this time.
0 commit comments