jprdonnelly/impala
1
0
Fork 0
mirror of https://github.com/apache/impala.git synced 2025-12-19 18:12:08 -05:00
Code Issues Projects Releases Wiki Activity

IMPALA-10745: Support Kerberos over HTTP for impala-shell

Browse Source 
This patch ports the implementation of GSSAPI authentication over http
transport from Impyla (https://github.com/cloudera/impyla/pull/415) to
impala-shell.

The implementation adds a new dependency on 'kerberos' python module,
which is a pip-installed module distributed under Apache License Version
2.
When using impala-shell with Kerberos over http, it is assumed that the
host has a preexisting kinit-cached Kerberos ticket that impala-shell
can pass to the server automatically without the user to reenter the
password.

Testing:
 - Passed exhaustive tests.
 - Tested manually on a real cluster with a full Kerberos setup.

Change-Id: Ia59ba4004490735162adbd468a00a962165c5abd
Reviewed-on: http://gerrit.cloudera.org:8080/18493
Reviewed-by: Csaba Ringhofer <csringhofer@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenkins@cloudera.com>
This commit is contained in:
wzhou-code
2022-04-27 15:30:51 -07:00
committed by Impala Public Jenkins
parent e6ed98c22b
commit 397d1d15a2
6 changed files with 183 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
infra/python/deps/requirements.txt
View File

@@ -40,6 +40,7 @@ impyla == 0.18a1
# six == 1.14.0 (specified separately)
thrift_sasl == 0.4.3
kazoo == 2.2.1
kerberos == 1.3.1
pexpect == 3.3
pg8000 == 1.10.2
prettytable == 0.7.2