question Re: QlikView connect to Kerberos-enabled HiveServer2 in Archives of Support Questions (Read Only)

QlikView connect to Kerberos-enabled HiveServer2

rxu — Fri, 16 Sep 2022 09:49:29 GMT

Abbott has a third party tool, QlikView, which needs to run Hive queries.

Suppose our cluster is kerberized via existing AD.

Once HDP cluster is kerberized, QlikView needs to be kerberized as well----it can get through Knox, but let's take Knox out of the picture for this discussion.

My questions are:

1. since both QlikView and HDP cluster are kerberized via the same AD, QlikView ticket should be recognized by HDP cluster. But, is there any extra setting needed? do we need to put QlikView service Account to OU=HadoopService?

2. QlikView is a server, user can log in to QlikView through AD. I believe Hive ACLs applies to each individual user no matter they are via QlikView or not --- this question is more like to QlikView guy, not us.

Re: QlikView connect to Kerberos-enabled HiveServer2

nsabharwal — Wed, 18 Nov 2015 05:20:11 GMT

@rxu

Please see this blog LINK

1) since both QlikView and HDP cluster are kerberized via the same AD, QlikView ticket should be recognized by HDP cluster. But, is there any extra setting needed? do we need to put QlikView service Account to OU=HadoopService?

AD user logs in and if this user is able to run beeline then same user will have access to QlikView to connect to HS2.

Q2 - for QlikView team

Re: QlikView connect to Kerberos-enabled HiveServer2

aervits — Wed, 03 Feb 2016 01:43:17 GMT

@rxu what did you end up doing? Please accept best answer or provide your own solution?