[ 
https://issues.apache.org/jira/browse/HIVE-26071?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17517293#comment-17517293
 ] 

Alexis D. commented on HIVE-26071:
----------------------------------

Hi, i understand from this issue that we can protect hive metastore with a JWT 
running in HTTP mode. I have some question related to this topic.

First question:
 * Would it be possible to run both protocol at same time (thrift and http?)

Second question :

      - What's about the Authenticator interface to get for example the 
username or groups in the jwt claims? For what i saw but i am not sur the 
Authenticator interface is quite couple with hadoop/kerberos ugi ?

      - is there already a design today to allow like storage based 
authorization implementation where authenticator can get information of who is 
authenticated but not hadoop related?

 

Thanks!

> JWT authentication for Thrift over HTTP in HiveMetaStore
> --------------------------------------------------------
>
>                 Key: HIVE-26071
>                 URL: https://issues.apache.org/jira/browse/HIVE-26071
>             Project: Hive
>          Issue Type: New Feature
>          Components: Standalone Metastore
>            Reporter: Sourabh Goyal
>            Assignee: Sourabh Goyal
>            Priority: Major
>
> HIVE-25575 recently added a support for JWT authentication in HS2. This Jira 
> aims to add the same feature in HMS



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to