[HIVE-6466] Add support for pluggable authentication modules (PAM) in Hive

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.13.0
• Fix Version/s: 0.13.0
• Component/s: HiveServer2

Release Note

*Release notes:*
PAM support allows Hive to use existing PAM services for authentication. PAM requires the native [JPAM|http://sourceforge.net/projects/jpam/files/jpam/jpam-1.1/] library. To enable PAM usage:
1. Download the JPAM native library [JPAM|http://sourceforge.net/projects/jpam/files/jpam/jpam-1.1/] for the relevant architecture.
2. Unzip and copy libjpam.so to a directory (<libjmap-directory>) on the system.
3. Add the directory to the LD_LIBRARY_PATH environment variable like so: export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:<libjmap-directory>
4. Set the "hive.server2.authentication" to PAM in hive-site.xml
5. Set the "hive.server2.authentication.pam.services" to a list of comma separated PAM services that will be used. Note that a file with the same name as the PAM service must exist in /etc/pam.d
6. Start HiveServer2
 

• Assignee: Vaibhav Gumashta
• Reporter: Vaibhav Gumashta
• Created: 19/Feb/14 21:14
• Updated: 19/Apr/14 06:51
• Resolved: 25/Feb/14 23:06

Description

More on PAM in these articles:
http://www.tuxradar.com/content/how-pam-works
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/Pluggable_Authentication_Modules.html

Usage from JPAM api: http://jpam.sourceforge.net/JPamUserGuide.html#id.s7.1

Issue Links

• relates to: HIVE-6318 Document SSL support added to HiveServer2
• relates to: HIVE-6503 document pluggable authentication modules (PAM) in template config, wiki