connecting to HIVE secured with LDAP

Open
#386 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
25/100
Issue type
Documentation
Clarity
Needs clarification
Activity status
Stale
Tech stack
python

Research direction

Review PyHive’s LDAP-related connection and authentication behavior and issue #257 first; the report names no source file or test. Reproduce the self-signed-certificate failure, then document a verified setup or clearly record whether LDAP is unsupported, including the truststore requirements.

Written by the indexing model from the issue text.

Description

Hi,
I think previous posts showed that pyhive has issues connecting to an ldap secured cluster (https://github.com/dropbox/PyHive/issues/257). There was mention of a package to fix it (pure-transport by @devinstevenson ). However we failed to have success. The repo mentioned is about 2 years old. Is there any update on this? Does pyhive already support ldap in some way himself and is there a recent/detailed example available on how to do this?

When we connect from an outside server to the ldap secured hive instance (using a self-singed certificate), we get:

thriftpy.transport.TTransportException: TTransportException(type=1, message="Bad status: 3 (b'PLAIN auth failed: javax.security.sasl.AuthenticationException: Error validating LDAP user [Caused by javax.naming.CommunicationException: simple bind failed: aserver.local:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]]')")

This seems to be an error indicating that the machine from where we are connecting does not trust the certificate that the LDAP-secured cluster with hive is using. We failed to find a detailed description of what to do to fix this (it is often mentioned one shuold add the certificate to the truststore on the machine from where we are connecting).

Thanks for update!

Dominant language
Python
Stars
1.7k
Forks
545
PR merge metrics
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from dropbox/PyHive

All issues in dropbox/PyHive

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.