[HIVE-8705] Support using pre-authenticated subject in kerberized HiveServer2 HTTP mode

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.13.0, 0.14.0
• Fix Version/s: 0.14.0
• Component/s: HiveServer2, JDBC
• Labels: TODOC14
• Assignee: Vaibhav Gumashta
• Reporter: Vaibhav Gumashta
• Created: 03/Nov/14 05:12
• Updated: 13/Nov/14 19:41
• Resolved: 05/Nov/14 03:26

Description

HIVE-6486 provided a patch to utilize pre-authenticated subject (someone who has programmatically done a JAAS login and is not doing kinit before connecting to HiveServer2 using the JDBC driver). However, that feature was only for the binary mode code path. We need to have a similar feature when the driver-server communicate using http transport.

Issue Links

• relates to: HIVE-6486 Support secure Subject.doAs() in HiveServer2 JDBC client.
• links to: Review Board