apache / apache/kyuubi

[FEATURE] Support kerberos authentication for ThriftHttp protocol

Open
#7,325 1 comment 1 reaction 0 assignees View on GitHub
kind:feature priority:major
Dominant language
Scala
Stars
2.4k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

### Search before asking

- [x] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.

### Describe the feature

Support kerberos authentication for ThriftHttp protocol

### Motivation

Document saids that it supports various protocols, but THRIFT_HTTP does not work with kerberos authentication.
- THRIFT_BINARY - HiveServer2 compatible thrift binary protocol.
- THRIFT_HTTP - HiveServer2 compatible thrift http protocol.
- REST - Kyuubi defined REST API(experimental).
- MYSQL - MySQL compatible text protocol(experimental).
- TRINO - Trino compatible http protocol(experimental).

### Describe the solution

_No response_

### Additional context

_No response_

### Are you willing to submit PR?

- [x] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
- [ ] No. I cannot submit a PR at this time.

Contributor guide

Open the contributing guide

Research direction

No file, test, or entry point is named. Start by tracing the THRIFT_HTTP authentication path and comparing it with the documented THRIFT_BINARY Kerberos behavior; done means THRIFT_HTTP works with Kerberos authentication and the relevant tests or documentation demonstrate that support.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala
Domain
authentication, backend-api-design
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.