[IMPALA-5278] Add Kerberos HTTP SPNEGO authentication support to Impala web consoles

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 3.3.0
• Component/s: Catalog, Clients
• Labels: kerberos security spnego web-console web-ui
• Epic Color: ghx-label-3
• Assignee: Unassigned
• Reporter: Chris A
• Created: 03/May/17 10:09
• Updated: 30/Jul/19 21:44
• Resolved: 23/Jul/19 16:36

Description

https://issues.apache.org/jira/browse/HADOOP-7119 and https://issues.apache.org/jira/browse/HBASE-5291 show SPNEGO being added to web consoles and web UIs to provide security through Kerberos (as a single sign-on solution)

According to current documentation (https://www.cloudera.com/documentation/enterprise/5-5-x/topics/impala_kerberos.html), Kerberos HTTP SPNEGO is not supported in Impala's Web UIs. Is there a way to implement this in the Impala WebUIs?

Issue Links

• is related to: HADOOP-7119 add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles
• is related to: HBASE-5291 Add Kerberos HTTP SPNEGO authentication support to HBase web consoles
• is related to: IMPALA-8814 Impala Doc: Webui and SPNEGO
• relates to: SPARK-18452 Support History Server UI to use SPNEGO