You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@hbase.apache.org by "Nihal Jain (Jira)" <ji...@apache.org> on 2025/05/23 09:58:00 UTC

[jira] [Commented] (HBASE-28368) Backport "HBASE-27693 Support for Hadoop's LDAP Authentication mechanism (Web UI only)" to branch-2

    [ https://issues.apache.org/jira/browse/HBASE-28368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17953671#comment-17953671 ] 

Nihal Jain commented on HBASE-28368:
------------------------------------

This is a nice security feature and I want to pull this along with HBASE-29244 in 2.6.x and 2.5.x, please let me know if any concerns.

CC: [~ndimiduk] [~apurtell] 

> Backport "HBASE-27693 Support for Hadoop's LDAP Authentication mechanism (Web UI only)" to branch-2
> ---------------------------------------------------------------------------------------------------
>
>                 Key: HBASE-28368
>                 URL: https://issues.apache.org/jira/browse/HBASE-28368
>             Project: HBase
>          Issue Type: New Feature
>            Reporter: Yash Dodeja
>            Assignee: Nihal Jain
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 2.7.0, 2.6.3, 2.5.12
>
>
> Hadoop's AuthenticationFilter has changed and now has support for ldap mechanism too. HBase still uses an older version tightly coupled with kerberos and spnego as the only auth mechanisms. HADOOP-12082 has added support for multiple auth handlers including LDAP. On trying to use Hadoop's AuthenticationFilterInitializer in hbase.http.filter.initializers, there is a casting exception as HBase requires it to extend org.apache.hadoop.hbase.http.FilterInitializer.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)