You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by GitBox <gi...@apache.org> on 2022/11/29 23:45:40 UTC

[GitHub] [iceberg] mas-chen opened a new issue, #6312: Iceberg support for Kerberos Hive Catalog

mas-chen opened a new issue, #6312:
URL: https://github.com/apache/iceberg/issues/6312

   ### Feature Request / Improvement
   
   Implement Kerberos support for Hive Catalog, the feature could be enabled by a property.
   
   ### Query engine
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org

[GitHub] [iceberg] gaborgsomogyi commented on issue #6312: Hive: add Kerberos auth support in HiveCatalog

Posted by GitBox <gi...@apache.org>.
gaborgsomogyi commented on issue #6312:
URL: https://github.com/apache/iceberg/issues/6312#issuecomment-1331776759

   Just to be crystal clear I see no reason to solve Kerberos authentication in Iceberg.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org

[GitHub] [iceberg] stevenzwu commented on issue #6312: Iceberg support for Kerberos Hive Catalog

Posted by GitBox <gi...@apache.org>.
stevenzwu commented on issue #6312:
URL: https://github.com/apache/iceberg/issues/6312#issuecomment-1331475275

   I work with @mas-chen on the same team. @pvary @rdblue @szehon-ho what do you think about adding Kerberos/auth support to Hive Catalog?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org

[GitHub] [iceberg] pvary commented on issue #6312: Hive: add Kerberos auth support in HiveCatalog

Posted by GitBox <gi...@apache.org>.
pvary commented on issue #6312:
URL: https://github.com/apache/iceberg/issues/6312#issuecomment-1331756830

   RetryingMetaStoreClient should take care of refreshing, or `reloginExpiringKeytabUser`. See: https://github.com/apache/hive/blob/master/standalone-metastore/metastore-common/src/main/java/org/apache/hadoop/hive/metastore/RetryingMetaStoreClient.java#L180
   
   Also there is an ongoing effort to use `DelegationToken`-s for Flink which would affect Hive as well in the long run. @gsomogyi knows more about this effort.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org

[GitHub] [iceberg] stevenzwu commented on issue #6312: Hive: add Kerberos auth support in HiveCatalog

Posted by GitBox <gi...@apache.org>.
stevenzwu commented on issue #6312:
URL: https://github.com/apache/iceberg/issues/6312#issuecomment-1334683100

   Based on the feedbacks, we will not pursue this route. closing the issue.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org

[GitHub] [iceberg] stevenzwu closed issue #6312: Hive: add Kerberos auth support in HiveCatalog

Posted by GitBox <gi...@apache.org>.
stevenzwu closed issue #6312: Hive: add Kerberos auth support in HiveCatalog
URL: https://github.com/apache/iceberg/issues/6312


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org

[GitHub] [iceberg] gaborgsomogyi commented on issue #6312: Hive: add Kerberos auth support in HiveCatalog

Posted by GitBox <gi...@apache.org>.
gaborgsomogyi commented on issue #6312:
URL: https://github.com/apache/iceberg/issues/6312#issuecomment-1331761768

   One just needs to implement a [delegation token provider](https://github.com/apache/flink/blob/master/flink-runtime/src/main/java/org/apache/flink/runtime/security/token/HadoopDelegationTokenProvider.java) for Hive and all done. This popped up already in the Flink community so sooner or later it will happen. There is already such provider in Spark...


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org