question Re: how to use 'HS2Driver' driver class to connect cdh hive with kerberos in Support Questions

how to use 'HS2Driver' driver class to connect cdh hive with kerberos

sevens — Wed, 05 Jul 2023 07:32:27 GMT

driver class: com.cloudera.hive.jdbc.HS2Driver

jar : HiveJDBC42-2.6.11.1014

the kerberos needs a keytab file, i wonder if this can be set by 'org.apache.hadoop.security.UserGroupInformation' class

thks.

Re: how to use 'HS2Driver' driver class to connect cdh hive with kerberos

DianaTorres — Wed, 05 Jul 2023 22:10:41 GMT

@sevens Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our Hive experts @Shmoo and @mszurap who may be able to assist you further.

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

Re: how to use 'HS2Driver' driver class to connect cdh hive with kerberos

cravani — Wed, 05 Jul 2023 22:35:03 GMT

@sevens You might want to use latest version: 2.6.21 and also there is no hard limit to use UGI with Cloudera Driver as opposed to Apache Drivers.

One option is to use JAAS file like below.

client.jaas

Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="PathToTheKeyTab" principal="cloudera@CLOUDERA" doNotPrompt=true; };

and set the java.security.auth.login.config system property to the location of the JAAS file.

eg: java -Djava.security.auth.login.config=/opt/clientconf/client.jaas

Doc ref: https://docs.cloudera.com/documentation/other/connectors/hive-jdbc/2-6-21/Cloudera-JDBC-Connector-for-Apache-Hive-Install-Guide.pdf

Re: how to use 'HS2Driver' driver class to connect cdh hive with kerberos

sevens — Thu, 06 Jul 2023 14:30:41 GMT

thks!