[HIVE-12270] Add DBTokenStore support to HS2 delegation token

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.0
• Component/s: Authentication, Security
• Assignee: Chaoyu Tang
• Reporter: Chaoyu Tang
• Created: 27/Oct/15 03:16
• Updated: 05/Mar/20 14:09
• Resolved: 08/Mar/16 20:24

Description

DBTokenStore was initially introduced by HIVE-3255 in Hive-0.12 and it is mainly for HMS delegation token. Later in Hive-0.13, the HS2 delegation token support was introduced by HIVE-5155 but it used MemoryTokenStore as token store. That the HIVE-9622 uses the shared RawStore (or HMSHandler) to access the token/keys information in HMS DB directly from HS2 seems not the right approach to support DBTokenStore in HS2. I think we should use HiveMetaStoreClient in HS2 instead.

Issue Links

• is related to: HIVE-22033 HiveServer2: fix delegation token renewal
• is related to: HIVE-11616 DelegationTokenSecretManager reuses the same objectstore, which has concurrency issues
• is related to: HIVE-17659 get_token thrift call fails for DBTokenStore in remote HMS mode