Details
Description
HIVE-7508 "Add Kerberos Support" seems to also remove the ability to specify a proxy user.
HIVE-8427 adds a call to ugi.hasKerberosCredentials() to check whether the connection is supposed to be a secure connection.
This however breaks support for Proxy Users as a proxy user UGI will always return false to hasKerberosCredentials().
See lines 273, 274 of HiveEndPoint.java
this.secureMode = ugi==null ? false : ugi.hasKerberosCredentials(); this.msClient = getMetaStoreClient(endPoint, conf, secureMode);
It also seems that between 13.1 and 0.14 the newConnection() method that includes a proxy user has been removed.
for reference: https://github.com/apache/hive/commit/8e423a12db47759196c24535fbc32236b79f464a
Attachments
Issue Links
- is related to
-
HIVE-7508 Kerberos support for streaming
- Closed
-
HIVE-8427 Hive Streaming : secure streaming hangs leading to time outs.
- Closed
-
HIVE-14114 Ensure RecordWriter in streaming API is using the same UserGroupInformation as StreamingConnection
- Closed