https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98383#M11829 <P>There was a tutorial that covers the configuration with older Knox version and Hive ODBC driver.</P><P><A href="http://hortonworks.com/hadoop-tutorial/secure-jdbc-odbc-clients-access-hiveserver2-using-apache-knox/">http://hortonworks.com/hadoop-tutorial/secure-jdbc-odbc-clients-access-hiveserver2-using-apache-knox/</A></P><P>For Hive ODBC v2.0.5, does the same solution work with HDP 2.3.2 (Knox 0.5)? </P><P>Or, do we have any known issues?</P> Thu, 10 Dec 2015 12:40:27 GMT vjiang 2015-12-10T12:40:27Z https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98383#M11829 <P>There was a tutorial that covers the configuration with older Knox version and Hive ODBC driver.</P><P><A href="http://hortonworks.com/hadoop-tutorial/secure-jdbc-odbc-clients-access-hiveserver2-using-apache-knox/">http://hortonworks.com/hadoop-tutorial/secure-jdbc-odbc-clients-access-hiveserver2-using-apache-knox/</A></P><P>For Hive ODBC v2.0.5, does the same solution work with HDP 2.3.2 (Knox 0.5)? </P><P>Or, do we have any known issues?</P> Thu, 10 Dec 2015 12:40:27 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98383#M11829 vjiang 2015-12-10T12:40:27Z https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98384#M11830 <P>Similar. Some tips: SSL Encryption </P>Support is provided for SSL encryption (Hive 0.13 onward, see HIVE-5351). To enable, set the following configurations in hive-site.xml: <UL><LI>hive.server2.use.SSL – Set this to true. </LI><LI>hive.server2.keystore.path – Set this to your keystore path. </LI><LI>hive.server2.keystore.password – Set this to your keystore password.</LI></UL>In ODBC Driver: <UL><LI>ENABLE SSL must be selected in the ODBC SSL Options window.</LI><LI>Ensure the "Allow Common Name Host Name Mismatch" is checked.</LI></UL> Thu, 10 Dec 2015 12:50:18 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98384#M11830 amcbarnett 2015-12-10T12:50:18Z https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98385#M11831 <P>Yes it works...I tried this recently on 2.3.2. See cheatsheet <A href="https://github.com/abajwa-hw/security-workshops/blob/master/Setup-knox-23.md">here</A></P> Thu, 10 Dec 2015 12:50:27 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98385#M11831 abajwa 2015-12-10T12:50:27Z https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98386#M11832 <P>Thanks for comment <A rel="user" href="https://community.cloudera.com/users/132/abajwa.html" nodeid="132">@Ali Bajwa</A></P><P>Did you try Hive ODBC v2.0.5? (just want to double check)</P> Fri, 11 Dec 2015 06:24:58 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98386#M11832 vjiang 2015-12-11T06:24:58Z https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98387#M11833 <P>The cheatsheet says "without them having to request kerberos ticket".</P><P>Does this mean it would need different configuration to work with Kerberoised HiveServer2?</P> Wed, 23 Dec 2015 08:03:31 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98387#M11833 hosako 2015-12-23T08:03:31Z https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98388#M11834 <P>A primary benefit of using Knox is that it insulates the clients from needing to be aware of Kerberos. However, if the HDP cluster is configured with Kerberos then Knox will need to be configured to interact with the cluster securely via Kerberos with the cluster. The clients however will be unaffected.</P> Wed, 23 Dec 2015 23:03:30 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/ODBC-access-via-Knox-to-HiveServer2-with-Hive-ODBC-driver-v2/m-p/98388#M11834 kevin_minder 2015-12-23T23:03:30Z