[HIVE-21247] Webhcat beeline in secure mode

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-alpha-1
• Component/s: WebHCat
• Target Version/s: 4.0.0
• Hadoop Flags: Reviewed
• Assignee: Daniel Dai Assign to me
• Reporter: Daniel Dai
• Created: 12/Feb/19 00:08
• Updated: 17/Nov/22 08:55
• Resolved: 01/Mar/19 17:59

Description

Follow up HIVE-20550, we need to make beeline work in secure mode. That means, we need to get a delegation token from hiveserver2, and pass that to beeline. This is similar to HIVE-5133, I make two changes:
1. Make a jdbc connection to hs2, pull delegation token from HiveConnection, and pass along
2. In hive jdbc driver, check for token file in HADOOP_TOKEN_FILE_LOCATION, and extract delegation token if exists

There's one config needed in webhcat-site.xml, to point "templeton.hive.hs2.url" to hive jdbc url.

Issue Links

• relates to: HIVE-21507 Hive swallows NPE if no delegation token found
• relates to: HIVE-5155 Support secure proxy user access to HiveServer2