Let’s continue the discussion about authentication here: Trying to report a bug in Hibernate - #4 by beikov
I am no lawyer, so I can’t guarantee you anything, but AFAIU it’s fine if you just distribute the license file for hibernate along with your product.