Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-15177

Authentication with hive fails when kerberos auth type is set to fromSubject and principal contains _HOST

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.0.0
    • Component/s: Authentication
    • Labels:
      None

      Description

      Authentication with hive fails when kerberos auth type is set to fromSubject and principal contains _HOST.

      When auth type is set to fromSubject, _HOST in principal is not resolved to the actual host name even though the correct host name is available. This leads to connection failure. If auth type is not set to fromSubject host resolution is done correctly.

      The problem is in getKerberosTransport method of org.apache.hive.service.auth.KerberosSaslHelper class. When assumeSubject is true host name in the principal is not resolved. When it is false, host name is passed on to HadoopThriftAuthBridge, which takes care of resolving the parameter.

        Attachments

        1. HIVE-15177.1.patch
          2 kB
          Oliver Draese
        2. HIVE-15177.2.patch
          2 kB
          Oliver Draese

          Activity

            People

            • Assignee:
              odraese Oliver Draese
              Reporter:
              surao@informatica.com Subrahmanya
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: