[HIVE-25875] Support multiple authentication mechanisms simultaneously

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.0
• Component/s: HiveServer2
• Labels: pull-request-available
• Target Version/s: 4.0.0
• Assignee: Sai Hemanth Gantasala
• Reporter: Naveen Gangam
• Created: 18/Jan/22 17:23
• Updated: 14/Feb/22 22:52
• Resolved: 03/Feb/22 11:54

Description

Currently, HS2 supports a single form of auth on any given instance of HiveServer2. Hive should be able to support multiple auth mechanisms on a single instance especially with http transport. for example, LDAP and SAML. In both cases, HS2 ends up with receiving an Authorization header in the request.
Similarly, we could be able to support JWT support or other forms of boundary authentication that is done outside of Hive (This is not in the scope of this jira).

The current scope of the Jira: Support SAML and LDAP authentication modes simultaneously when the transport mode is set to HTTP. This multi-auth will not work when transport mode is set to binary or all.

Issue Links

• causes: HIVE-25957 Fix password based authentication with SAML enabled
• requires: HIVE-24543 Support SAML 2.0 as an authentication mechanism
• links to: GitHub Pull Request #2954