Encountered on ADS 14-rc-3.
The 'Authentication' section on Server registration window of ADS (for Hive) contains 'Login Name' and 'Password' labels and textboxes giving impression that they are mandatory information to connect to the HiveServer 1 (Pls refer to the attached screenshot hiveserverregistration.png). If auth is not enabled, as of now, user has to leave those fields blank and proceed to enter other information such as host, port etc.
Could we have authentication type dropdown (just like in mongodb server registration page) with 'No Authentication', 'Normal Authentication' options with selection of 'No Authentication' disabling 'Login Name' and 'Password' text boxes?
Also, HiveServer 2 supports authentication via Kerberos, LDAP. It would be great if we support them as well.
Lets add the No authentication or Normal Authentication drop down as suggested by Ravi.
Ravi - pls open a separate issue for kerberos auth. We won't add explicit support for this until we get a request from a customer.
Looking at the driver code:
1. Hive Server 1 driver will ignore the username and password given in the Authentication section.
2. Hive Server 2 driver will pass the username and password given in the Authentication section to the Hiver Server 2.
Ravi, can you please configure your Hive Server 2 to authenticate using LDAP and test to see if you can connect successfully from ADS?
Looking at the driver code:
1. Hive Server 1 driver will ignore the username and password given in the Authentication section.
2. Hive Server 2 driver will pass the username and password given in the Authentication section to the Hiver Server 2.
Ravi, can you please configure your Hive Server 2 to authenticate using LDAP and test to see if you can connect successfully from ADS?
We'll make the following UI modifications:
If user chooses HiveServer1:
-- Authentication information is disabled
If user chooses HiveServer2:
-- Connect As drop down with 2 options: No authentication - in which case the auth info is disabled or
-- LDAP / Kerberos / Custom Authentication - in which case we display a message telling the user to use the driver tab to configure the info
We'll make the following UI modifications:
If user chooses HiveServer1:
-- Authentication information is disabled
If user chooses HiveServer2:
-- Connect As drop down with 2 options: No authentication - in which case the auth info is disabled or
-- LDAP / Kerberos / Custom Authentication - in which case we display a message telling the user to use the driver tab to configure the info
https://cwiki.apache.org/Hive/setting-up-hiveserver2.html - specifies the parameters to use for ldap or kerberos auth
https://cwiki.apache.org/Hive/setting-up-hiveserver2.html - specifies the parameters to use for ldap or kerberos auth
Hi Sachin/Nhi,
I have been able to connect ADS to LDAP auth enabled HiveServer2 as documented in https://www.aquaclusters.com/app/home/project/public/aquadatastudio/issue/9929
Could you please review it ?
Thank you
Hi Sachin/Nhi,
I have been able to connect ADS to LDAP auth enabled HiveServer2 as documented in https://www.aquaclusters.com/app/home/project/public/aquadatastudio/issue/9929
Could you please review it ?
Thank you
The Register Server dialog has been updated for Hive connections.
- For Hive Server 1, it is always No Authentication.
- For Hive Server 2, the authentication types are No Authentication, LDAP Authentication, and Kerberos Authentication.
The Register Server dialog has been updated for Hive connections.
- For Hive Server 1, it is always No Authentication.
- For Hive Server 2, the authentication types are No Authentication, LDAP Authentication, and Kerberos Authentication.
Issue #9864 |
Closed |
Fixed |
Resolved |
Completion |
No due date |
Fixed Build ADS 14.0.0-rc-18 |
No time estimate |
3 issue links |
relates to #9866
Issue #9866Kerberos, LDAP and custom authentication for HiveServer (2) |
relates to #9929
Issue #9929pls review the procedure used to connect ADS to LDAP auth enabled HiveServer2 |
depends upon #9869
Issue #9869ADS connects successfully to noauth HiveServer when login info is supplied |
Lets add the No authentication or Normal Authentication drop down as suggested by Ravi.
Ravi - pls open a separate issue for kerberos auth. We won't add explicit support for this until we get a request from a customer.