[HIVE-4752] Add support for hs2 api to use thrift over http

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.13.0
• Component/s: HiveServer2
• Assignee: Vaibhav Gumashta Assign to me
• Reporter: Thejas Nair
• Created: 19/Jun/13 00:36
• Updated: 30/Jan/24 00:14

Description

Hiveserver2 acts as service on the cluster for external applications. One way to implement access control to services on a hadoop cluster to have a gateway server authorizes service requests before forwarding them to the server. The knox project has taken this approach to simplify cluster security management.

Other services on hadoop cluster such as webhdfs and webhcat already use HTTP. Having hiveserver2 also support thrift over http transport will enable securing hiveserver2 as well using the same approach.

Issue Links

• duplicates: HIVE-4026 Add HTTP support to HiveServer2

Sub-Tasks

• add support for thrift over http transport in HS2: Closed
• Add https support to HiveServer2 http mode: Resolved
• Support Kerberos HTTP authentication for HiveServer2 running in http mode: Resolved
• HiveServer2 running in http mode should support for doAs functionality: Resolved
• Support LDAP authentication for HiveServer2 in http mode: Resolved
• Support Pluggable Authentication Modules for HiveServer2 running in http mode: Resolved
• HiveServer2 running in http mode should support trusted proxy access: Resolved
• Document SSL support added to HiveServer2: Resolved
• Add qop support for kerberos over http in HiveServer2: Closed
• Enable Kerberized SSL for HiveServer2 in http mode: Closed
• Let HiveServer2 run simultaneously in HTTP (over thrift) and Binary (normal thrift transport) mode: Closed