Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-13401

Kerberized HS2 with LDAP auth enabled fails kerberos/delegation token authentication

Log workAgile BoardRank to TopRank to BottomBulk Copy AttachmentsBulk Move AttachmentsVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.1.0
    • Authentication, Security
    • None

    Description

      When HS2 is running in kerberos cluster but with other Sasl authentication (e.g. LDAP) enabled, it fails in kerberos/delegation token authentication. It is because the HS2 server uses the TSetIpAddressProcess when other authentication is enabled.

      Attachments

        1. HIVE-13401.patch
          14 kB
          Chaoyu Tang
        2. HIVE-13401-branch2.0.1.patch
          16 kB
          Chaoyu Tang

        Issue Links

        breaks

        Bug - A problem which impairs or prevents the functions of the product. HIVE-13590 Kerberized HS2 with LDAP auth enabled fails in multi-domain LDAP case

        • Major - Major loss of function.
        • Closed
        is related to

        Improvement - An improvement or enhancement to an existing feature or task. HIVE-10115 HS2 running on a Kerberized cluster should offer Kerberos(GSSAPI) and Delegation token(DIGEST) when alternate authentication is enabled

        • Major - Major loss of function.
        • Closed

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            ctang Chaoyu Tang Assign to me
            ctang Chaoyu Tang
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment