[jira] [Commented] (NIFI-7025) Add kerberos password property to NiFi Hive components

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-7025?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17049386#comment-17049386 ] 

ASF subversion and git services commented on NIFI-7025:
-------------------------------------------------------

Commit 167853163884a20c27cd44b38679918220774411 in nifi's branch refs/heads/master from jstorck
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=1678531 ]

NIFI-7025: Initial commit adding Kerberos Password feature for Hive components
Kerberos Password property should not support EL, this includes a change to KerberosProperties which is also used by the HDFS processors (AbstractHadoopProcessor)
Added wiring in a KerberosContext to a TestRunner's MockProcessorInitializationContext
Removed synchronization blocks around KerberosUser.checkTGTAndRelogin, since that method is already synchronized
Updated AbstractHadoopProcessor to have a boolean accessor method to determine if explicit keytab configuration is allowed
Removed synchronization block from HiveConnectionPool's getConnection method (in Hive, Hive_1_1, Hive3 modules), since new TGT ticket acquisition is handled by the KerberosUser implementation.  If UGI is used to relogin, synchronization is handled internally by UGI.
Added Kerberos Principal and Kerberos Password properties to Hive, Hive_1_1, and Hive3 components
Hive, Hive_1_1, and Hive3 components now use KerberosUser implementations to authenticate with a KDC

Updated handling of the NIFI_ALLOW_EXPLICIT_KEYTAB environment variable in Hive and Hive3 components.  An accessor method has been added that uses Boolean.parseBoolean, which returns true if the environment variable is set to true, and false otherwise (including when the environment variable is unset).

Addressing PR feedback

Addressing PR feedback

This closes #4102.


> Add kerberos password property to NiFi Hive components
> ------------------------------------------------------
>
>                 Key: NIFI-7025
>                 URL: https://issues.apache.org/jira/browse/NIFI-7025
>             Project: Apache NiFi
>          Issue Type: Sub-task
>          Components: Extensions
>            Reporter: Jeff Storck
>            Assignee: Jeff Storck
>            Priority: Major
>          Time Spent: 2.5h
>  Remaining Estimate: 0h
>
> In addition to the principal/keytab and KerberosCredentialsService options for accessing kerberized services from NiFi Hive components, a password field should be added.
> Components should validate that only one set of options should be configured:
>  * principal and keytab
>  * principal and password
>  * KerberosCredentialsService
> The components that will be affected by this change:
>  * Hive3ConnectionPool
>  * Hive_1_1ConnectionPool
>  * HiveConnectionPool
>  * PutHive3Streaming
>  * PutHiveStreaming



--
This message was sent by Atlassian Jira
(v8.3.4#803005)