HDDS-11587. Ozone Manager not processing file put requests with multi…

…-tenancy enabled (#7316)
apache · Nov 5, 2024 · 0fb5e50 · 0fb5e50
1 parent 786bb49
commit 0fb5e50
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/.../java/org/apache/hadoop/ozone/om/multitenant/RangerClientMultiTenantAccessController.java b/.../java/org/apache/hadoop/ozone/om/multitenant/RangerClientMultiTenantAccessController.java
@@ -130,9 +130,15 @@ public RangerClientMultiTenantAccessController(OzoneConfiguration conf)
 
     LOG.info("authType = {}, login user = {}", authType, usernameOrPrincipal);
 
-    client = new RangerClient(rangerHttpsAddress,
-        authType, usernameOrPrincipal, passwordOrKeytab,
-        rangerServiceName, OzoneConsts.OZONE);
+    UserGroupInformation loginUser = UserGroupInformation.getLoginUser();
+    try {
+      client = new RangerClient(rangerHttpsAddress,
+          authType, usernameOrPrincipal, passwordOrKeytab,
+          rangerServiceName, OzoneConsts.OZONE);
+    } finally {
+      // set back the expected login user
+      UserGroupInformation.setLoginUser(loginUser);
+    }
 
     // Whether or not the Ranger credentials are valid is unknown right after
     // RangerClient initialization here. Because RangerClient does not perform