ShreyeshArangath opened a new pull request, #3150: URL: https://github.com/apache/iceberg-python/pull/3150
# Rationale for this change Enable PyIceberg's HiveCatalog to authenticate using DIGEST-MD5 SASL with delegation tokens from `$HADOOP_TOKEN_FILE_LOCATION`, which is the standard mechanism in secure Hadoop environments. This unblocks PyIceberg adoption in production clusters that don't use Kerberos directly ## Summary - Add HiveAuthError exception for Hive-specific auth failures - Add hadoop_credentials module to parse HDTS binary token files - Add _DigestMD5SaslTransport to work around THRIFT-5926 (None initial response) - Support hive.metastore.authentication property (NONE/KERBEROS/DIGEST-MD5) - Add pure-sasl to hive extras in pyproject.toml - Backward compatible: existing kerberos_auth boolean still works Closes #3145 ## Are these changes tested? Unit tests ## Are there any user-facing changes? Yes, introduce DIGEST-MD5 SASAL delegation token support -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
