Uploaded image for project: 'Calcite'
  1. Calcite
  2. CALCITE-1385

Support password-based convenience logins for Kerberos-authenticated clients

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: avatica-1.19.0
    • Component/s: avatica
    • Labels:
      None

      Description

      Had a request for the automatic Kerberos login process to also support password-based authentication (instead of just keytab).

      This would require some extra logic in KerberosConnection to do the Jaas Configuration with the provided password, but not attempt to prompt the user for it (as it might be a headless client, like some GUI application).

      One problem is that GUI apps will likely try to use pass this value in via the "password" key in some properties (in addition to the "user" field). Will actually have to try to test this out to make sure it works as intended.

        Attachments

          Activity

            People

            • Assignee:
              elserj Josh Elser
              Reporter:
              elserj Josh Elser
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: