You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Richard Ding (JIRA)" <ji...@apache.org> on 2017/04/25 17:13:04 UTC
[jira] [Created] (HIVE-16529) Replace JPAM with libpam4j for PAM
authentication
Richard Ding created HIVE-16529:
-----------------------------------
Summary: Replace JPAM with libpam4j for PAM authentication
Key: HIVE-16529
URL: https://issues.apache.org/jira/browse/HIVE-16529
Project: Hive
Issue Type: Improvement
Components: Authentication
Affects Versions: 1.2.0
Reporter: Richard Ding
PAM authentication is an important feature available since Hive 0.13. But Hive blog gives the following warnings:
{quote}
JPAM library that is used to provide the PAM authentication mode can cause HiveServer2 to go down if a user's password has expired. This happens because of segfault/core dumps from native code invoked by JPAM. Some users have also reported crashes during logins in other cases as well. Use of LDAP or KERBEROS is recommended.
{quote}
JPAM also requires user to install a native library. Furthermore, JPAM library seems not to have been updated since 2007.
Other Apache projects (e.g. Ambari/Ranger/Knox) use a newer library libpam4j which doesn't require installation of native library.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)