You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Kevin Risden (Jira)" <ji...@apache.org> on 2020/02/04 22:57:00 UTC

[jira] [Created] (KNOX-2223) HS2 cookie not stored in HadoopAuthCookieStore

Kevin Risden created KNOX-2223:
----------------------------------

             Summary: HS2 cookie not stored in HadoopAuthCookieStore
                 Key: KNOX-2223
                 URL: https://issues.apache.org/jira/browse/KNOX-2223
             Project: Apache Knox
          Issue Type: Bug
            Reporter: Kevin Risden
            Assignee: Kevin Risden
             Fix For: 1.4.0


HadoopAuthCookieStore checks to see if the cookie corresponds to Knox after KNOX-1341 and further improved in KNOX-2026. 

The HS2 cookie format doesn't match what Knox expects though. Knox expects the cookie to have the entire principal (knox/hostname@REALM.COM). HS2 generates the authentication cookie based on the short name just "knox". 

https://github.com/apache/hive/blob/master/service/src/java/org/apache/hive/service/auth/HttpAuthUtils.java#L83

This causes a mismatch and Knox never stores the HS2 cookie. This results in repeated Knox Kerberos auth to HS2 which is a performance penalty.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)