[HIVE-6657] Add test coverage for Kerberos authentication implementation using Hadoop's miniKdc

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.13.0
• Fix Version/s: 0.14.0
• Component/s: Authentication, Testing Infrastructure, Tests
• Assignee: Prasad Suresh Mujumdar
• Reporter: Prasad Suresh Mujumdar
• Created: 13/Mar/14 21:37
• Updated: 13/Nov/14 19:41
• Resolved: 26/Mar/14 04:11

Description

Hadoop 2.3 includes miniKdc module. This provides a KDC that can be used by downstream projects to implement unit tests for Kerberos authentication code.
Hive has lot of code related to Kerberos and delegation token for authentication, as well as accessing secure hadoop resources. This pretty much has no coverage in the unit tests. We needs to add unit tests using miniKdc module.
Note that Hadoop 2.3 doesn't include a secure mini-cluster. Until that is available, we can at least test authentication for components like HiveServer2, Metastore and WebHCat.

Issue Links

• is required by: HIVE-6665 Add test coverage for metastore kerberos authentication with HiveServer2
• links to: Review Request #19206