[FEATURE][ODBC] Support SIGV4 along with Basic Auth about sql-odbc HOT 8 OPEN

Related bug: #20

from sql-odbc.

@joshuali925 do JDBC driver or other clients support using both SIGv4 and FGAC at the same time?

from sql-odbc.

@MaxKsyunz i don't think so, according to its readme auth can only be one of NONE, BASIC, AWS_SIGV4

from sql-odbc.

@joshuali925 do you think there's value in supporting this scenario across more clients?
cc @CEHENKLE

from sql-odbc.

@MaxKsyunz I'm assuming that for a cluster that uses IAM and FGAC, clients needs to get both information from the user in order to connect. If this is true, then i think yes because otherwise the clients using either SIGV4 or FGAC won't be able to connect to the cluster.

from sql-odbc.

@joshuali925 I'd like to understand this use case better. Here's what I got so far:

1. There is a domain with a resource-based access policy that uses a particular IAM.
2. There is an OpenSearch cluster with several roles set up.

Is the problem that

1. the security plugin is not aware of the SIGv4 key and cannot map it the IAM to a particular role, or
2. there's a need to use IAM to authenticate application's access to the domain and another authority to authenticate end-users of the application?

from sql-odbc.

@MaxKsyunz The use case is that there is a domain which needs both AWS credentials and username password to access, and we cannot use ODBC to connect to it

For the problem i'm also not sure. i put my assumptions in the description but I felt my understanding of how auth works in this case is probably not accurate

from sql-odbc.

@MaxKsyunz doesn't look like all clients support SIGv4 yet. opensearch-project/opensearch-clients#22

from sql-odbc.