Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-6837

HiveServer2 thrift/http mode & binary mode proxy user check fails reporting IP null for client

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.13.0
    • 0.13.0
    • HiveServer2
    • None

    Description

      Hive Server running thrift/http with Kerberos security.

      Kinited user knox attempting to proxy as sam.

      Beeline connection failed reporting error on hive server logs:
      Caused by: org.apache.hadoop.security.authorize.AuthorizationException: Unauthorized connection for super-user: knox from IP null

      Attachments

        1. hive.log
          5 kB
          Takahiko Saito
        2. HIVE-6837.1.patch
          6 kB
          Vaibhav Gumashta
        3. HIVE-6837.2.patch
          5 kB
          Vaibhav Gumashta
        4. HIVE-6837.3.patch
          6 kB
          Vaibhav Gumashta

        Issue Links

          is blocked by

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-6738 HiveServer2 secure Thrift/HTTP needs to accept doAs parameter from proxying intermediary

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HIVE-6857 Refactor HiveServer2 TSetIpAddressProcessor

          • Major - Major loss of function.
          • Open
          links to

          Web Link Review Board

          Activity

            People

              vgumashta Vaibhav Gumashta
              darumugam Dilli Arumugam
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: