[HIVE-6558] HiveServer2 Plain SASL authentication broken after hadoop 2.3 upgrade

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.13.0
• Fix Version/s: 0.13.0
• Component/s: Authentication, HiveServer2
• Assignee: Prasad Suresh Mujumdar
• Reporter: Prasad Suresh Mujumdar
• Created: 05/Mar/14 22:37
• Updated: 12/Mar/14 05:14
• Resolved: 12/Mar/14 05:14

Description

Java only includes Plain SASL client and not server. Hence HiveServer2 includes a Plain SASL server implementation. Now Hadoop has its own Plain SASL server HADOOP-9020 which is part of Hadoop 2.3 release.
The two servers use different Sasl callbacks and the servers are registered in java.security.Provider via static code. As a result the HiveServer2 instance could be using Hadoop's Plain SASL server which breaks the authentication.

Issue Links

• links to: Review #18814