apache / apache/dolphinscheduler

[DSIP-43] Add the UGI authentication module

Open
#16,025 0 comments 0 reactions 0 assignees View on GitHub
DSIP
Dominant language
Java
Stars
14.5k
Forks
5.1k
Avg merge
1d 21h
Merged PRs (30d)
28

Description

### Search before asking

- [X] I had searched in the [DSIP](https://github.com/apache/dolphinscheduler/issues/14102) and found no similar DSIP.

### Motivation

Right now, we have multiple module might need to use UGI e.g. `hdfs-storage`, `hive-jdbc`....
The UGI might created with `remote user`, `kerberos`...

we need to add a ugi-authentication module to provide the login service.

### Design Detail

WIP

### Compatibility, Deprecation, and Migration Plan

Compatibility with latest version

### Test Plan

Test manual.

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

Contributor guide

Open the contributing guide

Research direction

Review the linked DSIP issue and the existing hdfs-storage and hive-jdbc modules to understand how UGI is currently created. Define the authentication module's login-service scope for remote-user and Kerberos users, then verify compatibility with the latest version through the planned manual tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
hadoop, java
Domain
authentication, backend
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.