kyuubi icon indicating copy to clipboard operation
kyuubi copied to clipboard

[FEATURE] Support Multiple PLAIN Authentication Methods Simultaneously

Open nqvuong1998 opened this issue 6 months ago • 2 comments

Code of Conduct

Search before asking

  • [x] I have searched in the issues and found no similar issues.

Describe the feature

This feature request proposes enhancing Kyuubi to support multiple PLAIN authentication methods (e.g., LDAP and JDBC) concurrently, allowing greater flexibility for diverse use cases.

Motivation

Currently, Apache Kyuubi supports SASL authentication with both KERBEROS and PLAIN (LDAP, JDBC, or CUSTOM) authentication types. However, when using PLAIN, only the first specified PLAIN authentication type is valid. This limitation prevents the simultaneous use of multiple PLAIN authentication methods, such as LDAP for user authentication and JDBC for ad-hoc jobs.

Are you willing to submit PR?

  • [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
  • [x] No. I cannot submit a PR at this time.

nqvuong1998 avatar Jun 06 '25 09:06 nqvuong1998

You can easily achieve this by developing a custom auth plugin.

pan3793 avatar Jun 06 '25 09:06 pan3793

Thank you for the suggestion! While a custom plugin is a viable workaround, I believe native support for this feature in Kyuubi would provide a more seamless experience for users and reduce the maintenance burden of custom solutions.

nqvuong1998 avatar Jun 06 '25 09:06 nqvuong1998