cs-lpc opened a new issue, #5230:
URL: https://github.com/apache/kyuubi/issues/5230

   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   
   
   ### Search before asking
   
   - [X] I have searched in the 
[issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no 
similar issues.
   
   
   ### Describe the bug
   
   According to the PR https://github.com/apache/spark/pull/42760, if the 
hive.metastore.token.signature parameter is not empty, we may also encounter 
authentication failures in Kyuubi.
   
   
   
   1. Set the configuration bellow
   ```
       <property>
          <name>hive.metastore.token.signature</name>
          <value>HIVE_DELEGATION_TOKEN</value>
       </property>
   ```
   3. Start kyuubi server with `hive`
   4. Connet kyuubi with proxy user ,
   5. Run sql `insert into test11 values('a');` 
   
   then the user  will be `hive` to execute hdfs command
   
   
   
   ### Affects Version(s)
   
   master
   
   ### Kyuubi Server Log Output
   
   _No response_
   
   ### Kyuubi Engine Log Output
   
   _No response_
   
   ### Kyuubi Server Configurations
   
   ```yaml
   <property>
          <name>hive.metastore.token.signature</name>
          <value>HIVE_DELEGATION_TOKEN</value>
       </property>
   ```
   
   
   ### Kyuubi Engine Configurations
   
   _No response_
   
   ### Additional context
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [X] Yes. I would be willing to submit a PR with guidance from the Kyuubi 
community to fix.
   - [ ] No. I cannot submit a PR at this time.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to