[ https://issues.apache.org/jira/browse/HIVE-6486?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14085186#comment-14085186 ]
Lefty Leverenz commented on HIVE-6486: -------------------------------------- [~shivshi], here's how you can get edit privilege for the wiki (as described on the "About This Wiki" page): {quote} - Create a Confluence account if you don't already have one. - Sign up for the user mailing list by sending a message to user-subscr...@hive.apache.org. - Send a message to u...@hive.apache.org requesting write access to the Hive wiki, and provide your Confluence usename. {quote} * [About This Wiki -- How to get permission to edit | https://cwiki.apache.org/confluence/display/Hive/AboutThisWiki#AboutThisWiki-Howtogetpermissiontoedit] * [Confluence account | https://cwiki.apache.org/confluence/signup.action] > Support secure Subject.doAs() in HiveServer2 JDBC client. > --------------------------------------------------------- > > Key: HIVE-6486 > URL: https://issues.apache.org/jira/browse/HIVE-6486 > Project: Hive > Issue Type: Improvement > Components: Authentication, HiveServer2, JDBC > Affects Versions: 0.11.0, 0.12.0 > Reporter: Shivaraju Gowda > Assignee: Shivaraju Gowda > Fix For: 0.13.0 > > Attachments: HIVE-6486.1.patch, HIVE-6486.2.patch, HIVE-6486.3.patch, > HIVE-6486_Hive0.11.patch, TestCase_HIVE-6486.java > > > HIVE-5155 addresses the problem of kerberos authentication in multi-user > middleware server using proxy user. In this mode the principal used by the > middle ware server has privileges to impersonate selected users in > Hive/Hadoop. > This enhancement is to support Subject.doAs() authentication in Hive JDBC > layer so that the end users Kerberos Subject is passed through in the middle > ware server. With this improvement there won't be any additional setup in the > server to grant proxy privileges to some users and there won't be need to > specify a proxy user in the JDBC client. This version should also be more > secure since it won't require principals with the privileges to impersonate > other users in Hive/Hadoop setup. > -- This message was sent by Atlassian JIRA (v6.2#6252)