[HIVE-13401] Kerberized HS2 with LDAP auth enabled fails kerberos/delegation token authentication

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.0
• Component/s: Authentication, Security
• Assignee: Chaoyu Tang
• Reporter: Chaoyu Tang
• Created: 31/Mar/16 17:25
• Updated: 03/May/17 00:14
• Resolved: 03/Apr/16 01:31

Description

When HS2 is running in kerberos cluster but with other Sasl authentication (e.g. LDAP) enabled, it fails in kerberos/delegation token authentication. It is because the HS2 server uses the TSetIpAddressProcess when other authentication is enabled.

Issue Links

• breaks: HIVE-13590 Kerberized HS2 with LDAP auth enabled fails in multi-domain LDAP case
• is related to: HIVE-10115 HS2 running on a Kerberized cluster should offer Kerberos(GSSAPI) and Delegation token(DIGEST) when alternate authentication is enabled