Naveen Gangam created HIVE-27063:
------------------------------------
Summary: LDAP+JWT auth forms not supported
Key: HIVE-27063
URL: https://issues.apache.org/jira/browse/HIVE-27063
Project: Hive
Issue Type: Bug
Components: HiveServer2
Affects Versions: 4.0.0
Reporter: Naveen Gangam
In HIVE-25875, support for multiple authentication forms was added for Hive
Server. In HIVE-25575, support for JWT authentication was added. However,
setting hive.server2.authentication="JWT,LDAP" will fail with the following
validation error.
{noformat}
<12>1 2023-02-03T09:32:11.018Z hiveserver2-0 hiveserver2 1
0393cf91-48f7-49e3-b2b1-b983000d4cd6 [mdc@18060 class="server.HiveServer2"
level="WARN" thread="main"] Error starting HiveServer2 on attempt 2, will retry
in 60000ms\rorg.apache.hive.service.ServiceException: Failed to Start
HiveServer2\r at
org.apache.hive.service.CompositeService.start(CompositeService.java:80)\r at
org.apache.hive.service.server.HiveServer2.start(HiveServer2.java:692)\r at
org.apache.hive.service.server.HiveServer2.startHiveServer2(HiveServer2.java:1154)\r
at
org.apache.hive.service.server.HiveServer2.access$1400(HiveServer2.java:145)\r
at
org.apache.hive.service.server.HiveServer2$StartOptionExecutor.execute(HiveServer2.java:1503)\r
at org.apache.hive.service.server.HiveServer2.main(HiveServer2.java:1316)\r at
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)\r at
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)\r
at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)\r
at java.base/java.lang.reflect.Method.invoke(Method.java:566)\r at
org.apache.hadoop.util.RunJar.run(RunJar.java:318)\r at
org.apache.hadoop.util.RunJar.main(RunJar.java:232)\rCaused by:
java.lang.RuntimeException: Failed to init HttpServer\r at
org.apache.hive.service.cli.thrift.ThriftHttpCLIService.initServer(ThriftHttpCLIService.java:239)\r
at
org.apache.hive.service.cli.thrift.ThriftCLIService.start(ThriftCLIService.java:235)\r
at org.apache.hive.service.CompositeService.start(CompositeService.java:70)\r
... 11 more\rCaused by: java.lang.Exception: The authentication types have
conflicts: LDAP,JWT\r at
org.apache.hive.service.auth.AuthType.verifyTypes(AuthType.java:69)\r at
org.apache.hive.service.auth.AuthType.<init>(AuthType.java:43)\r at
org.apache.hive.service.cli.thrift.ThriftHttpServlet.<init>(ThriftHttpServlet.java:124)\r
at
org.apache.hive.service.cli.thrift.ThriftHttpCLIService.initServer(ThriftHttpCLIService.java:197)\r
... 13 more\r
{noformat}
We never fixed the AuthType.validateTypes() to support this.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
