You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2019/07/27 07:20:00 UTC

[jira] [Commented] (IMPALA-8783) Add Kerberos SPNEGO support to the http hs2 server

    [ https://issues.apache.org/jira/browse/IMPALA-8783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16894312#comment-16894312 ] 

ASF subversion and git services commented on IMPALA-8783:
---------------------------------------------------------

Commit 82f753e3044bd2482f35d137fbb28516fc0ef86c in impala's branch refs/heads/master from Thomas Tauber-Marshall
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=82f753e ]

IMPALA-8783: Add Kerberos SPNEGO support to the http hs2 server

IMPALA-8538 added support for http connections to the hs2 server along
with LDAP auth support. This patch adds support for authorizing with
Kerberos via SPNEGO.

Testing:
- Added a unit test that runs a minikdc and an Impala server against
  it. Currently disabled until curl is available in the toolchain.
- Tested manually on a real cluster with a full Kerberos setup and
  beeline.

Change-Id: I15d9a842ab37ebc34b9fde5917137ff2961d870a
Reviewed-on: http://gerrit.cloudera.org:8080/13918
Reviewed-by: Impala Public Jenkins <im...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>


> Add Kerberos SPNEGO support to the http hs2 server
> --------------------------------------------------
>
>                 Key: IMPALA-8783
>                 URL: https://issues.apache.org/jira/browse/IMPALA-8783
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Clients
>    Affects Versions: Impala 3.3.0
>            Reporter: Thomas Tauber-Marshall
>            Assignee: Thomas Tauber-Marshall
>            Priority: Major
>              Labels: security
>
> IMPALA-8538 added support for http connections to the hs2 server along with LDAP auth support. We should also add support for Kerberos auth via SPNEGO



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org