Kevin Risden created KNOX-2223:
----------------------------------
Summary: HS2 cookie not stored in HadoopAuthCookieStore
Key: KNOX-2223
URL: https://issues.apache.org/jira/browse/KNOX-2223
Project: Apache Knox
Issue Type: Bug
Reporter: Kevin Risden
Assignee: Kevin Risden
Fix For: 1.4.0
HadoopAuthCookieStore checks to see if the cookie corresponds to Knox after
KNOX-1341 and further improved in KNOX-2026.
The HS2 cookie format doesn't match what Knox expects though. Knox expects the
cookie to have the entire principal (knox/[email protected]). HS2 generates
the authentication cookie based on the short name just "knox".
https://github.com/apache/hive/blob/master/service/src/java/org/apache/hive/service/auth/HttpAuthUtils.java#L83
This causes a mismatch and Knox never stores the HS2 cookie. This results in
repeated Knox Kerberos auth to HS2 which is a performance penalty.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
