[jira] [Commented] (KNOX-2223) HS2 cookie not stored in HadoopAuthCookieStore

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KNOX-2223?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17031048#comment-17031048 ] 

ASF subversion and git services commented on KNOX-2223:
-------------------------------------------------------

Commit d05d307e0b1bea9f2f1a63a02392a917b35814c0 in knox's branch refs/heads/master from Kevin Risden
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=d05d307 ]

KNOX-2223 - HS2 cookie not stored in HadoopAuthCookieStore (#253)

This ensures that Knox principal both short
and long will be compared against the cookie
returned. This will match the HS2 cookie.

Signed-off-by: Kevin Risden <kr...@apache.org>

> HS2 cookie not stored in HadoopAuthCookieStore
> ----------------------------------------------
>
>                 Key: KNOX-2223
>                 URL: https://issues.apache.org/jira/browse/KNOX-2223
>             Project: Apache Knox
>          Issue Type: Bug
>            Reporter: Kevin Risden
>            Assignee: Kevin Risden
>            Priority: Major
>             Fix For: 1.4.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> HadoopAuthCookieStore checks to see if the cookie corresponds to Knox after KNOX-1341 and further improved in KNOX-2026. 
> The HS2 cookie format doesn't match what Knox expects though. Knox expects the cookie to have the entire principal (knox/hostname@REALM.COM). HS2 generates the authentication cookie based on the short name just "knox". 
> https://github.com/apache/hive/blob/master/service/src/java/org/apache/hive/service/auth/HttpAuthUtils.java#L83
> This causes a mismatch and Knox never stores the HS2 cookie. This results in repeated Knox Kerberos auth to HS2 which is a performance penalty.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)