Details
-
Improvement
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
None
-
None
-
HiveServer2 will check if the Authorization header is present and not empty before checking SPNEGO authentication.
Description
Currently HiveServer2 SPNEGO authentication waits until setting up Kerberos before checking header. This can be checked up front to avoid doing any Kerberos related work if the header is empty. This is helpful in a lot of cases since typically the first request is empty with the client waiting for a 401 before returning the Authorization header.