[CALCITE-1214] Support url-based kerberos login

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: avatica-1.8.0
• Component/s: avatica
• Assignee: Josh Elser
• Reporter: Josh Elser
• Created: 25/Apr/16 20:57
• Updated: 21/Aug/23 12:34
• Resolved: 29/Apr/16 19:12

Description

I was talking with someone today about JDBC drivers in BI-tools/app-servers which reminded me about the general guidance to "make your driver work with a jar and a JDBC url".

With the work I added recently to support client authentication with Kerberos, I wrote it under the expectation that clients are already logged in via a ticket cache (and have the appropriate system properties or environment variables set to point at the ticket cache). This doesn't jive with the original "jar and url" notion.

It should be pretty easy to support a principal and keytab property to enable these types of environments.

Issue Links

• relates to: CALCITE-5947 Use existing ticket cache for kerberos login
• links to: PR