[HIVE-4670] Authentication module should pass the instance part of the Kerberos principle

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 0.11.0
• Component/s: Authentication, HiveServer2
• Assignee: Shreepadma Venugopalan
• Reporter: Shreepadma Venugopalan
• Created: 06/Jun/13 02:05
• Updated: 19/Nov/14 00:35
• Resolved: 19/Nov/14 00:35

Description

When Kerberos authentication is enabled for HiveServer2, the thrift SASL layer passes instance@realm from the principal. It should instead strip the realm and pass just the instance part of the principal.

Issue Links

• blocks: SENTRY-67 Complete Hive Integration points