[HIVE-5447] HiveServer2 should allow secure impersonation over LDAP or other non-kerberos connection

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 0.11.0, 0.12.0
• Fix Version/s: 0.14.0
• Component/s: HiveServer2
• Assignee: Prasad Suresh Mujumdar
• Reporter: Prasad Suresh Mujumdar
• Created: 04/Oct/13 18:48
• Updated: 13/Nov/14 19:43
• Resolved: 29/Aug/14 21:46

Description

Currently the impersonation on a secure hadoop cluster only works when HS2 connection itself is kerberos. This forces clients to configure kerberos which can be a deployment nightmare.
We should allow other authentications mechanism to perform secure impersonation.

Issue Links

• duplicates: HIVE-6312 doAs with plain sasl auth should be session aware
• duplicates: HIVE-7764 Support all JDBC-HiveServer2 authentication modes on a secure cluster
• is duplicated by: HIVE-6973 HiveServer2 should support a non-kerberos user authentication on a secure cluster.