Thrift::SASL::Transport - Thrift Transport allowing Kerberos auth/encryption through GSSAPI
version 0.003
run kinit first for getting your credentials cache in order, then (example for communicating with a secure HiveServer2 instance):
use Authen::SASL qw(XS);
my $sasl = Authen::SASL->new( mechanism => 'GSSAPI');
use Thrift::Socket;
use Thrift::BufferedTransport;
use Thrift::SASL::Transport;
use Thrift::API::HiveClient2;
my $socket = Thrift::Socket->new( $srv_host, 10000 );
my $strans = Thrift::SASL::Transport->new(
Thrift::BufferedTransport->new($socket),
$sasl,
$debuglevel
);
my $hive = Thrift::API::HiveClient2->new(
_socket => $socket,
_transport => $strans,
);
Add SASL support to Apache's Thrift, in order to support Kerberos auth, among others. Highly experimental and hack-ish. Ideally this should be part of the Thrift distribution, once proven to work reliably.
Based on the pyhs2 python module by Brad Ruderman https://github.com/BradRuderman/pyhs2
Initial version with simple SASL authentication (LDAP) developped by Vikentiy Fesunov at Booking.com
Thanks to my employer Booking.com to allow me to release this module for public use
David Morel david.morel@amakuru.net
This software is copyright (c) 2014 by David Morel.
This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.