[HIVE-14888] SparkClientImpl checks for "kerberos" string in hiveconf only when determining whether to use keytab file.

• Type: Bug
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.1.0
• Component/s: Spark
• Labels: pull-request-available
• Target Version/s: 4.0.0
• Flags: Patch
• Assignee: David McGinnis
• Reporter: Thomas Rega
• Created: 04/Oct/16 20:08
• Updated: 21/Oct/22 07:31

Description

The SparkClientImpl will only provide a principal and keytab argument if the HADOOP_SECURITY_AUTHENTICATION in hive conf is set to "kerberos". This will not work on clusters with Hadoop security enabled that are not configured as "kerberos", for example, a cluster which is configured for "ldap".

The solution is to call UserGroupInformation.isSecurityEnabled() instead.

 

Code Review: https://reviews.apache.org/r/70718/

Issue Links

• links to: GitHub Pull Request #635
• links to: Review Board