[HIVE-20583] Use canonical hostname only for kerberos auth in HiveConnection

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.0, 4.0.0
• Fix Version/s: 3.2.0, 4.0.0-alpha-1
• Labels: pull-request-available
• Target Version/s: 3.2.0, 4.0.0
• Assignee: Prasanth Jayachandran
• Reporter: Prasanth Jayachandran
• Created: 17/Sep/18 20:31
• Updated: 17/Nov/22 08:54
• Resolved: 18/Sep/18 18:49

Description

HiveConnection uses canonical hostnames which is a requirement only for kerberos clusters (specifically on clusters that has reverse DNS resolution disabled). Use canonical hostnames only when kerberos auth is enabled. 

Forcing canonical hostnames breaks SSL SNI extensions.

gopalv provided this reference http://web.mit.edu/kerberos/krb5-devel/doc/admin/princ_dns.html#service-principal-canonicalization 

Issue Links

• relates to: HIVE-20606 hive3.1 beeline to dns complaining about ssl on ip
• links to: GitHub Pull Request #3352
• links to: GitHub Pull Request #3355