Re: separated authN configuration for binary and http transports

2022-04-06 Thread Janos Kovacs
Thanks Naveen, I missed that HIVE-25875 recently provided explicit multi-AuthN support. The use case is simple: secured cluster with hive.server2.transport.mode=all for both secured native clients (kerberos) and external clients (user/pass) - KERBEROS is needed for cluster-local (or near-cluster)

Re: separated authN configuration for binary and http transports

2022-03-28 Thread Naveen Gangam
Hi Janos, LDAP auth works in http mode as well. We have made some enhancements recently: HIveServer2 is now capable of supporting multiple authentication mode. For example: in http mode, you can set it to "LDAP,SAML" We have just added another auth mode (JWT) for http transport via HIVE-25575. So

Re: separated authN configuration for binary and http transports

2022-03-28 Thread Stamatis Zampetakis
Hey Janos, You brought up an interesting subject. I haven't worked on the code around the authentication process so cannot foresee the impact on the codebase but high level your idea seems reasonable to me. I would be favorable in such a change but I would definitely like to see some tests and d