ThriftCLIService has a local implementation getShortName() that assumes a short name is always the part before "@" and "/". This is not always the case as Kerberos Rules (from Hadoop's KerberosName) might actually transform a name to something else.
Considering a pending change to getShortName() (#
HADOOP-12751) and the normal use of KerberosName in other parts of Hive it only seems logical to use the standard implementation.
HIVE-13590 Kerberized HS2 with LDAP auth enabled fails in multi-domain LDAP case
- is related to
HIVE-15174 Respect auth_to_local rules from hdfs configs (core-site.xml) for LDAP authentication too
- relates to
HADOOP-12751 While using kerberos Hadoop incorrectly assumes names with '@' to be non-simple