Hello Hive team
I've been trying to set metastore up in remote standalone mode (hive
v3.1.2) with a RDBMS backend, which starts up as expected with
hive.metastore.uri, and various jpox/javax.connection parameters.

Now I'm trying to enable the auth N/Z for this remote metastore. I've
implemented HiveMetastoreAuthenticationProvider (as well as Configurable) -
per this
<https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=82903061#ConfigurationProperties-hive.security.metastore.authenticator.manager>
but the interface simply sets the MetastoreHandler. I've tried setting
custom k/v in the client side config assuming the one of the get configs
would, but that does not seem to happen.

   - myauthenticator.getConf
   - hmsHandler.getConf
   - SessionState.getSessionConf

I've checked the HadoopDefaultMetastoreAuthentcator implementation that
comes packaged but again, it seems a no-op authN implementation.
Note, I'm using both a usual hive cli call as well as via a customClient
test class.
In both cases, I do successfully receive the PreEventContext in my custom
preeventListener (based on the default authorizerpreeventlistener) but as
before, I am unable to find any client side custom key/values in the
preeventcontext.

Also note, this being simply a metastore service, I'm not running the HS2
service at all - thus username/password for opening session from say
beeline doesn't work since the service on 10000/1 is not available.

Would someone be able to suggest how a standalone Metastore is supposed to
perform authN without receiving principal/token from client?

Reply via email to