LuciferYang opened a new issue, #14406: URL: https://github.com/apache/gravitino/issues/14406
### Version main branch ### Describe what's wrong With `authentication.type=kerberos` and impersonation off, `ClosableHiveCatalog.doKerberosOperations` still requests an HMS delegation token for the current principal and adds it to `kerberosClient.getLoginUser()`, the login UGI that all requests share. Each request makes an extra `getDelegationToken` call, and the caller's token stays on the login UGI that every other request runs as. ### How to reproduce Configure an Iceberg catalog (or the Iceberg REST server) with a Hive backend, Kerberos authentication and `authentication.impersonation-enable=false`, and run any operation. HMS receives a `get_delegation_token` call for the caller, and the token stays on the login UGI. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
