Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-25479

Browser SSO auth may fail intermittently on chrome browser in virtual environments

    XMLWordPrintableJSON

Details

    Description

      When browser based SSO is enabled the Hive JDBC driver might miss the POST requests coming from the browser which provide the one-time token issued by HS2s after the SAML flow completes. The issue was observed mostly in virtual environments on Windows.

      The issue seems to be that when the driver binds to a port even though the port is in LISTEN state, if the browser issues posts request on the port before it goes into ACCEPT state the result is non-deterministic. On native OSes we observed that the connection is buffered and is received by the driver when it begins accepting the connections. In case of VMs it is observed that even though the connection is buffered and presented when the port goes into ACCEPT mode, the payload of the request or the connection itself is lost. This race condition causes the driver to wait for the browser until it timesout and the browser keeps waiting for a response from the driver.

      Attachments

        Issue Links

          Activity

            People

              vihangk1 Vihang Karajgaonkar
              vihangk1 Vihang Karajgaonkar
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h 50m
                  1h 50m