Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-20583

Use canonical hostname only for kerberos auth in HiveConnection

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.2.0, 4.0.0
    • Fix Version/s: 3.2.0, 4.0.0
    • Component/s: None
    • Labels:
      None

      Description

      HiveConnection uses canonical hostnames which is a requirement only for kerberos clusters (specifically on clusters that has reverse DNS resolution disabled). Use canonical hostnames only when kerberos auth is enabled. 

      Forcing canonical hostnames breaks SSL SNI extensions.

      Gopal Vijayaraghavan provided this reference http://web.mit.edu/kerberos/krb5-devel/doc/admin/princ_dns.html#service-principal-canonicalization 

        Attachments

        1. HIVE-20583.1.patch
          1 kB
          Prasanth Jayachandran

          Issue Links

            Activity

              People

              • Assignee:
                prasanth_j Prasanth Jayachandran
                Reporter:
                prasanth_j Prasanth Jayachandran
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: