Enable Impersonation for HttpFS

About this task

You can set up proxy user functionality if you want HttpFS to impersonate a user from a set of hosts, or to impersonate a user that belongs to a set of groups. When you configure proxy user functionality, the proxy user can perform “doAs” operations. Add configuration properties to the httpfs-site-site.xml and core-site.xml files to configure proxy user functionality.

Procedure

  1. Add the following configuration properties to the httpfs-site-site.xml file:
    • httpfs.proxyuser.#USER#.hosts
    • httpfs.proxyuser.#USER#.groups
  2. Replace #USER# with the username of the proxy that can perform “doAs” operations. For the host property, you can add a list of host names as the value. For the group property, you can add a list of groups as the value. Alternatively, you can add a wildcard character (*) as the value for host and group properties. To add multiple users, copy the property and replace #USER# with the proxy user name.
    Host Example:
    <property>
                                <name>httpfs.proxyuser.mapr.hosts</name>
                                <value>*</value>       
                                </property>
    Group Example:
    <property>
                                <name>httpfs.proxyuser.mapr.groups</name>
                                <value>*</value>        
                                </property>