[HIVE-6182] LDAP Authentication errors need to be more informative

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.13.0
• Fix Version/s: 0.13.0
• Component/s: Authentication
• Assignee: Szehon Ho
• Reporter: Szehon Ho
• Created: 10/Jan/14 02:01
• Updated: 15/Jan/14 23:39
• Resolved: 15/Jan/14 23:39

Description

There are a host of errors that can happen when logging into an LDAP-enabled Hive-server2 from beeline. But for any error there is only a generic log message:

SASL negotiation failure
javax.security.sasl.SaslException: PLAIN auth failed: Error validating LDAP user
	at org.apache.hadoop.security.SaslPlainServer.evaluateResponse(SaslPlainServer.java:108)
	at org.apache.thrift.transport.TSaslTransport$SaslParticipant.evaluateChallengeOrRespons

And on Beeline side there is only an even more unhelpful message:

Error: Invalid URL: jdbc:hive2://localhost:10000/default (state=08S01,code=0)

It would be good to print out the underlying error message at least in the log, if not beeline. But today they are swallowed. This is bad because the underlying message is the most important, having the error codes as shown here : LDAP error code

The beeline seems to throw that exception for any error during connection, authetication or otherwise.