presto-yarn icon indicating copy to clipboard operation
presto-yarn copied to clipboard

Using additional_config_properties to setup LDAP authentication bind pattern results in slider's environment variable substitution

Open decimusphostle opened this issue 7 years ago • 1 comments

Per the presto-yarn documentation, using site.global.additional_config_properties is meant to be the 'mechanism' to specify additional properties that eventually land in the config.properties file.

However trying to setup the LDAP user bind pattern as say authentication.ldap.user-bind-pattern=uid=${USER},ou=people,dc=company,dc=com results in ${USER} being substituted by slider to be the user that is used to start up the daemons.

(i.e. the configuration that lands in config.properties ends up being something like: authentication.ldap.user-bind-pattern=uid=yarn,ou=people,dc=company,dc=com)

Any thoughts on a work-around for this issue?

decimusphostle avatar Jun 28 '17 19:06 decimusphostle

@decimusphostle This is a bug/feature request. presto-yarn doesnt officially support LDAP or Kerberos security features for Presto. AFAIK this doesn't have a reasonable workaround.

anusudarsan avatar Jun 29 '17 13:06 anusudarsan