I am building a REST API server that relays queries to Impala.
The REST API will receive keytab file from the client server, and want to proxy Kerberos authentication on the API side.
The following sequence.
[Client Server] -- send keytab --> [REST API] --> ODBC or JDBC --> [Impala]
In order to realize the above, I think that it is necessary to dynamically authenticate ODBC using the keytab received on the REST API side. is there such a thing possible?
For example, HDFS Java API can pass and transfer arbitrary keytab as follows.
However, Impala's ODBC or JDBC document shows that you are preparing a static file (UPNKeytabMappingFile) that defines pairs of user principals and keytab files.
"principal" : "cloudera@CLOUDERA",
Is there a way to authenticate with keytab received from client without predefining it?
Thank you in advance.
View solution in original post