You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I enabled kerberos in sandbox HDP 3.1.5, but fail to connect hive server2.
jdbc url: jdbc:hive2://hostname1:2181,hostname2:2181,hostname3:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2;principal=hive/hostname1@REALM
and as we know,this url has limitations,so I try to make it universal.
1、each node has own keytab which principal has 3 parts: primary/instance@REALM
Obviously,it has a problem that each node has own specific principal.
2、set hive@${realm} for hive.server2.authentication.kerberos.principal
3、save it,and check each node's hive.service.keytab file,like hostname1 host:
klist -ket hive.service.keytab
....
4 11/17/2021 11:35:42 hive/hostname1@REALM (des-cbc-md5)
...
3 11/17/2021 11:35:42 hive@REALM (des-cbc-md5)
...
4、test this program in each node
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
I enabled kerberos in sandbox HDP 3.1.5, but fail to connect hive server2.
jdbc url: jdbc:hive2://hostname1:2181,hostname2:2181,hostname3:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2;principal=hive/hostname1@REALM
and as we know,this url has limitations,so I try to make it universal.
1、each node has own keytab which principal has 3 parts: primary/instance@REALM
Obviously,it has a problem that each node has own specific principal.
2、set hive@${realm} for hive.server2.authentication.kerberos.principal
3、save it,and check each node's hive.service.keytab file,like hostname1 host:
klist -ket hive.service.keytab
....
4 11/17/2021 11:35:42 hive/hostname1@REALM (des-cbc-md5)
...
3 11/17/2021 11:35:42 hive@REALM (des-cbc-md5)
...
4、test this program in each node
5、it's done. I will test it in DS.
Beta Was this translation helpful? Give feedback.
All reactions