apache / apache/kyuubi

[FEATURE] We have a requirement to add second authentication method in Kyuubi along with LDAP method

Open
#6,317 3 comments 0 reactions 0 assignees View on GitHub
kind:feature priority:major
Dominant language
Scala
Stars
2.4k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

### Search before asking

- [X] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.

### Describe the feature

Hi,
We have a requirement to add a custom authentication method along with LDAP authentication in Kyuubi 1.8.0. This is required for us as we would like to authenticate User to get access to Kyuubi/Spark and then would like to provide role based access to Hadoop/Ceph storage using tokens.

### Motivation

As we are looking for this solution in our system, I think some other users also may need it due to their specific requirement.

### Describe the solution

If we can enable the second authentication method in the configuration files that would greatly help. If we dn't use the second authentication method either we should be able to set it as 'None' or empty.

### Additional context

_No response_

### Are you willing to submit PR?

- [X] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
- [ ] No. I cannot submit a PR at this time.

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are identified. Start by reviewing Kyuubi's existing LDAP authentication configuration and the authentication flow, then clarify how a custom second method and its None or empty configuration should work. Done means the supported design, configuration behavior, and authentication coverage are agreed and implemented.

Written by the indexing model from the issue text.

Assessment

Tech stack
hadoop, scala, spark
Domain
authentication, backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.