Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-6697

HiveServer2 secure thrift/http authentication needs to support SPNego

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 0.13.0
    • HiveServer2
    • None

    Description

      Looking to integrating Apache Knox to work with HiveServer2 secure thrift/http.

      Found that thrift/http uses some form of Kerberos authentication that is not SPNego. Considering it is going over http protocol, expected it to use SPNego protocol.

      Apache Knox is already integrated with WebHDFS, WebHCat, Oozie and HBase Stargate using SPNego for authentication.

      Requesting that HiveServer2 secure thrift/http authentication support SPNego.

      Attachments

        1. HIVE-6697.1.patch
          14 kB
          Dilli Arumugam
        2. HIVE-6697.2.patch
          16 kB
          Dilli Arumugam
        3. HIVE-6697.3.patch
          16 kB
          Dilli Arumugam
        4. HIVE-6697.4.patch
          15 kB
          Vaibhav Gumashta
        5. hive-6697-req-impl-verify.md
          6 kB
          Dilli Arumugam

        Issue Links

          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-6738 HiveServer2 secure Thrift/HTTP needs to accept doAs parameter from proxying intermediary

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link review board

          Activity

            People

              darumugam Dilli Arumugam
              darumugam Dilli Arumugam
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: