Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-13401

Kerberized HS2 with LDAP auth enabled fails kerberos/delegation token authentication

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.1.0
    • Component/s: Authentication, Security
    • Labels:
      None

      Description

      When HS2 is running in kerberos cluster but with other Sasl authentication (e.g. LDAP) enabled, it fails in kerberos/delegation token authentication. It is because the HS2 server uses the TSetIpAddressProcess when other authentication is enabled.

        Attachments

        1. HIVE-13401.patch
          14 kB
          Chaoyu Tang
        2. HIVE-13401-branch2.0.1.patch
          16 kB
          Chaoyu Tang

          Issue Links

          breaks

          Bug - A problem which impairs or prevents the functions of the product. HIVE-13590 Kerberized HS2 with LDAP auth enabled fails in multi-domain LDAP case

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-10115 HS2 running on a Kerberized cluster should offer Kerberos(GSSAPI) and Delegation token(DIGEST) when alternate authentication is enabled

          • Major - Major loss of function.
          • Closed

            Activity

              People

              • Assignee:
                ctang Chaoyu Tang
                Reporter:
                ctang Chaoyu Tang
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: