[
https://issues.apache.org/jira/browse/HIVE-15174?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ruslan Dautkhanov updated HIVE-15174:
-------------------------------------
Description:
Hive has implemented Kerberos principal mapping for authentication; the same
should be implemented for LDAP authentication.
Both Kerberos and LDAP are using Active Directory as a backend to store
principals (in many cases), so it's naturally to think this should work for
LDAP too.
Fact that this mapping works only for Kerberos and not for LDAP principals,
breaks authentication in our organization.
was:
Hive has implemented Kerberos principal mapping for authentication; the same
should be implemented for LDAP authentication.
Both Kerberos and LDAP are using Active Directory as a backend to store
principals (in many cases), so it's naturally to think this should work for
LDAP too.
Fact that IMPALA-2660 works only for Kerberos and not for LDAP principals,
breaks authentication in our organization.
> Respect auth_to_local rules from hdfs configs (core-site.xml) for LDAP
> authentication too
> -----------------------------------------------------------------------------------------
>
> Key: HIVE-15174
> URL: https://issues.apache.org/jira/browse/HIVE-15174
> Project: Hive
> Issue Type: Bug
> Components: Authentication, HiveServer2, Security
> Affects Versions: 1.1.1, 1.2.1, 2.1.0
> Environment: Hive 1.1; Hadoop 2.6
> Reporter: Ruslan Dautkhanov
> Labels: security
>
> Hive has implemented Kerberos principal mapping for authentication; the same
> should be implemented for LDAP authentication.
> Both Kerberos and LDAP are using Active Directory as a backend to store
> principals (in many cases), so it's naturally to think this should work for
> LDAP too.
> Fact that this mapping works only for Kerberos and not for LDAP principals,
> breaks authentication in our organization.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
