[ https://issues.apache.org/jira/browse/HIVE-30?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12649198#action_12649198 ]
Edward Capriolo commented on HIVE-30: ------------------------------------- I understand the concern about having multiple session servers. However, I believe the state belongs to the client. I might want to make a swing application that uses three SessionStates, etc. A generic SessionState server is just an extra abstraction at this phase. You never know how the client will want to use the SessionState. >>we should also have one server side to manage common abstractions like >>userids and such ...True. The 'userid' and 'password' in hwi is just a nice way of naming the session. Imagine a web server managing thousands of jobs, the SHOW_SERVER_STATUS page would be thousands of meaningless session ids. I decided to attach a human readable name to the hive sessions. A simple password mechanism just protects Bob from from editing Sara's session. It was a throw in feature. If you set the password to empty string it has no effect. My goal for was not to create a wide reaching security implication for hive/hadoop but to simply give the user the ability to name and optionally protect their session since anyone who goes to the web server can get at the session. --Lets talk more about passing that information from a web interface-- >>we seem to be initializing HiveConf for each show table/database True. I am using the thrift API for the meta operations. Using the web interface it is possible to view the schema without starting a session state. Those two parts of the application are different. The schema browsing is more or less stateless, that is why the HiveConf is reloaded per request. >>how are the logs going to be managed?--Right now there is no logging. JSP >>Session ID might make sense over Hive Session ID >>Regarding the userid and authentication stuff, I think the best there is to >>use pam based scheme to tie this in with an existing LDAP repository or unix >>accounts. But that can perhaps be done as a follow up transaction? Again, my goal was to name the sessions and give a simple password mechanism. I know there is a hadoop jira open for kerberos. I work a lot with LDAP, in the end you can force the hadoop property from inside java, right? Also my LDAP server uses public key authentication, I actually do not have a password in the entire server. So LDAP brings other complications. > Hive web interface > ------------------ > > Key: HIVE-30 > URL: https://issues.apache.org/jira/browse/HIVE-30 > Project: Hadoop Hive > Issue Type: Bug > Reporter: Jeff Hammerbacher > Assignee: Edward Capriolo > Priority: Minor > Attachments: HIVE-30.patch > > > Hive needs a web interface. The initial checkin should have: > * simple schema browsing > * query submission > * query history (similar to MySQL's SHOW PROCESSLIST) > A suggested feature: the ability to have a query notify the user when it's > completed. > Edward Capriolo has expressed some interest in driving this process. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.