Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-15174

Respect auth_to_local rules from hdfs configs (core-site.xml) for LDAP authentication too

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 1.1.1, 1.2.1, 2.1.0
    • None
    • Authentication, HiveServer2, Security

    • Hive 1.1; Hadoop 2.6

    Description

      Hive has implemented Kerberos principal mapping for authentication; the same should be implemented for LDAP authentication.
      Both Kerberos and LDAP are using Active Directory as a backend to store principals (in many cases), so it's naturally to think this should work for LDAP too.
      Fact that this mapping works only for Kerberos and not for LDAP principals, breaks authentication in our organization.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-12751 While using kerberos Hadoop incorrectly assumes names with '@' to be non-simple

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. HIVE-12981 ThriftCLIService uses incompatible getShortName() implementation

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. HIVE-13590 Kerberized HS2 with LDAP auth enabled fails in multi-domain LDAP case

          • Major - Major loss of function.
          • Closed

          Activity

            People

              Unassigned Unassigned
              Tagar Ruslan Dautkhanov
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: