Gabriel39 commented on PR #65135: URL: https://github.com/apache/doris/pull/65135#issuecomment-4873784992
[P1] fe/be-java-extensions/iceberg-metadata-scanner/src/main/java/org/apache/doris/iceberg/IcebergSysTableJniScanner.java:66 当前把完整 params 传给 PreExecutionAuthenticatorCache.getAuthenticator()，但 BE 的 IcebergSysTableJniReader 会把 scan properties 统一加 hadoop. 前缀传入 JNI scanner。旧实现会 strip 掉这个 transport prefix；现在 Kerberos 配置会变成 hadoop.hadoop.security.authentication / hadoop.hadoop.kerberos.principal，AuthenticationConfig 读不到正常 key，从而回退 simple auth。这个会回归已有 $snapshots、$files 等 Iceberg metadata table 在 Kerberized HDFS catalog 上的读取。建议恢复和 Paimon/Hudi 一致的 prefix stripping，并避免 scanner-only 参数进入 authenticator 输入。 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
