Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-15177

Authentication with hive fails when kerberos auth type is set to fromSubject and principal contains _HOST

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 4.0.0-alpha-1
    • Authentication
    • None

    Description

      Authentication with hive fails when kerberos auth type is set to fromSubject and principal contains _HOST.

      When auth type is set to fromSubject, _HOST in principal is not resolved to the actual host name even though the correct host name is available. This leads to connection failure. If auth type is not set to fromSubject host resolution is done correctly.

      The problem is in getKerberosTransport method of org.apache.hive.service.auth.KerberosSaslHelper class. When assumeSubject is true host name in the principal is not resolved. When it is false, host name is passed on to HadoopThriftAuthBridge, which takes care of resolving the parameter.

      Attachments

        1. HIVE-15177.1.patch
          2 kB
          Oliver Draese
        2. HIVE-15177.2.patch
          2 kB
          Oliver Draese

        Activity

          People

            odraese Oliver Draese
            surao@informatica.com Subrahmanya
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: