ZeppelinContext run method runs a paragraph as anonymous user
Locked
ZeppelinContext run method runs a paragraph as anonymous user
 
|
Hi,
We have enabled notebook permissions in our Zeppelin installation and now we are facing the problem that if we want to run a paragraph from another paragraph in the same notebook (to refresh it), the user that is running that paragraph is the anonymous user and not the front-end user and, therefore, we get a "ForbiddenException" because of that. Is there a way to run a paragraph as the front-end user? Kind regards, Luis Angel Vicente Sanchez [hidden email] |
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
We are using Zeppelin 0.7.1/
-- Luis Angel Vicente Sanchez [hidden email] On Mon, 11 Sep 2017, at 11:12, Luis Angel Vicente Sanchez wrote: > Hi, > > We have enabled notebook permissions in our Zeppelin installation and > now we are facing the problem that if we want to run a paragraph from > another paragraph in the same notebook (to refresh it), the user that is > running that paragraph is the anonymous user and not the front-end user > and, therefore, we get a "ForbiddenException" because of that. > > Is there a way to run a paragraph as the front-end user? > > > Kind regards, > > Luis Angel Vicente Sanchez > [hidden email] |
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
And we are running the notebook using spark local, and using a whirl
JdbcRealm to authenticate users is there anything we can do to make the spark interpreter impersonate the front-end user? -- Luis Angel Vicente Sanchez [hidden email] On Mon, 11 Sep 2017, at 11:14, Luis Angel Vicente Sanchez wrote: > We are using Zeppelin 0.7.1/ > > > -- > Luis Angel Vicente Sanchez > [hidden email] > > On Mon, 11 Sep 2017, at 11:12, Luis Angel Vicente Sanchez wrote: > > Hi, > > > > We have enabled notebook permissions in our Zeppelin installation and > > now we are facing the problem that if we want to run a paragraph from > > another paragraph in the same notebook (to refresh it), the user that is > > running that paragraph is the anonymous user and not the front-end user > > and, therefore, we get a "ForbiddenException" because of that. > > > > Is there a way to run a paragraph as the front-end user? > > > > > > Kind regards, > > > > Luis Angel Vicente Sanchez > > [hidden email] |
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
Some extra info:
println(s"AUTHENTICATION INFO :: ${z.getInterpreterContext.getAuthenticationInfo.getUser} ${z.getInterpreterContext.getAuthenticationInfo.getTicket}") That line inside a Spark notebook prints both the user name and the ticket that the user gets after a successful login... so the interpreter knows who the user is. Can that info be used to run a paragraph? -- Luis Angel Vicente Sanchez [hidden email] On Mon, 11 Sep 2017, at 12:16, Luis Angel Vicente Sanchez wrote: > And we are running the notebook using spark local, and using a whirl > JdbcRealm to authenticate users is there anything we can do to make the > spark interpreter impersonate the front-end user? > > -- > Luis Angel Vicente Sanchez > [hidden email] > > On Mon, 11 Sep 2017, at 11:14, Luis Angel Vicente Sanchez wrote: > > We are using Zeppelin 0.7.1/ > > > > > > -- > > Luis Angel Vicente Sanchez > > [hidden email] > > > > On Mon, 11 Sep 2017, at 11:12, Luis Angel Vicente Sanchez wrote: > > > Hi, > > > > > > We have enabled notebook permissions in our Zeppelin installation and > > > now we are facing the problem that if we want to run a paragraph from > > > another paragraph in the same notebook (to refresh it), the user that is > > > running that paragraph is the anonymous user and not the front-end user > > > and, therefore, we get a "ForbiddenException" because of that. > > > > > > Is there a way to run a paragraph as the front-end user? > > > > > > > > > Kind regards, > > > > > > Luis Angel Vicente Sanchez > > > [hidden email] |
|
|
Hi, could you share the paragraph to show how did you run a paragraph in a different paragraph? > if we want to run a paragraph from another paragraph in the same notebook (to refresh it), Regard, On Mon, Sep 11, 2017 at 11:24 PM, Luis Angel Vicente Sanchez <[hidden email]> wrote: Some extra info: |
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
That's quite simple actually. Zeppelin exposes the ZeppelinContext as the variable z... you just need to do this:
z.run(paragraphId)
On Tue, 12 Sep 2017, at 03:33, Park Hoon wrote:
|
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
I also tried with z.run(paragraphSeqNumber)
On Tue, 12 Sep 2017, at 09:22, Luis Angel Vicente Sanchez wrote:
|
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
Hi I work with Luis. We have tried both options of triggering cells in the same notebook using z.run(paraIndex) as well as the paragraph id z.run("20170620-085926_474506193") . We are happy to patch Zeppelin. Would be grateful if you can point us to the right direction on how to propogate the credentials. Regards Deenar On 12 September 2017 at 20:30, Luis Angel Vicente Sanchez <[hidden email]> wrote:
|
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
Could you create a ticket for it first ? I suspect it is due to we didn’t pass user name in InterpreterContextRunner, but needs more investigation.
Best Regard,
Jeff Zhang
From: Deenar Toraskar <[hidden email]>
Reply-To: "[hidden email]" <[hidden email]> Date: Wednesday, September 13, 2017 at 3:04 PM To: "[hidden email]" <[hidden email]> Subject: Re: ZeppelinContext run method runs a paragraph as anonymous user Hi
I work with Luis. We have tried both options of triggering cells in the same notebook using z.run(paraIndex) as well as the paragraph id z.run("20170620-085926_474506193") .
We are happy to patch Zeppelin. Would be grateful if you can point us to the right direction on how to propogate the credentials.
Regards
Deenar
On 12 September 2017 at 20:30, Luis Angel Vicente Sanchez
<[hidden email]> wrote:
|
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
Hi Jeff,
I have created this issue https://issues.apache.org/jira/browse/ZEPPELIN-2929. I was trying to change the source of this problem and I reach to a similar conclusion but I wasn't sure what the best way to propagate the user name would be.
Regards,
Luis Angel Vicente Sanchez
On Wed, 13 Sep 2017, at 08:38, Jianfeng (Jeff) Zhang wrote:
|
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
Hi Jeff Let us know if you need more details or if you can suggest any fixes ourselves and we are happy to try them out. Regards Deenar On 13 September 2017 at 11:05, Luis Angel Vicente Sanchez <[hidden email]> wrote:
|
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
In reply to this post by Jianfeng (Jeff) Zhang
Hi Jeff We are at a dead end with this https://issues.apache. Regards Deenar On 13 September 2017 at 08:38, Jianfeng (Jeff) Zhang <[hidden email]> wrote:
|
Re: ZeppelinContext run method runs a paragraph as anonymous user
|
|
These are my findings:
I think I have found why the credentials are lost, I I think I might be able to create a patched version that will work for us.
Execution flow:
So, the credentials are lost because the InterpreterContextRunner, the info that it serialised to execute a paragraph, doesn’t contain the credentials.
If we modify the InterpreterContextRunner to include the AuthenticationInfo and modify the onRemoteRunParagraph to accept an optional AuthenticationInfo... it might do the trick. But... is this the right way to solve this problem?
If that's the case I'm happy to contribute with a PR to address this issue.
On Mon, 25 Sep 2017, at 19:46, Deenar Toraskar wrote:
|
«
Return to Apache Zeppelin Users (incubating) mailing list
|
1 view|%1 views
| Free forum by Nabble | Edit this page |