[IMPALA-8868] HTTP 401 response is wrong when both kerberos and ldap are enabled

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: Impala 3.3.0
• Fix Version/s: Impala 3.3.0
• Epic Color: ghx-label-3
• Assignee: Thomas Tauber-Marshall
• Reporter: Thomas Tauber-Marshall
• Created: 15/Aug/19 18:56
• Updated: 19/Aug/19 17:26
• Resolved: 19/Aug/19 17:26

Description

When both kerberos and ldap auth are enabled and an http request is not successfully authenticated, the THttpServer only sends the 'WWW-Authenticate: Basic' challenge and doesn't send the 'WWW-Authenticate: Negotiate' challenge, which can cause clients that want to connect with kerberos to fail to authenticate.