[IMPALA-9456] Allow disabling kerberos for incoming internal and external connections even if --principal is set

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 3.4.0
• Component/s: Backend
• Labels: kerberos security
• Target Version: Product Backlog
• Epic Color: ghx-label-11
• Assignee: Tim Armstrong
• Reporter: Tim Armstrong
• Created: 03/Mar/20 17:24
• Updated: 14/May/20 20:15
• Resolved: 12/Mar/20 04:48

Description

This would be useful in cases where we need to talk to kerberized services (HMS, etc) and want to keep our TGT up to date using Impala's kinit infrastructure, but don't want to kerberize all connections.

Issue Links

• is duplicated by: IMPALA-8844 Decouple tgt renewal thread from Keberos configuration.
• relates to: IMPALA-9430 Kerberos configs should be passed through to Kerberos libraries even if principal is not set