question Re: curl with hive on secured cluster in Archives of Support Questions (Read Only)

curl with hive on secured cluster

garunkumar85 — Fri, 04 Mar 2016 02:03:13 GMT

How can I run curl with hive command in secured cluster?

curl -s -d execute="select+*+from+pokes;" \
       -d statusdir="pokes.output" \
       'http://localhost:50111/templeton/v1/hive?user.name=ekoifman'

in user.name - I tried to pass Hive Principal and keytab didnt work and tried with user principal didnt work. can you please provide some example?

Re: curl with hive on secured cluster

jstraub — Fri, 04 Mar 2016 04:50:28 GMT

Usually when you want to use curl in combination with Kerberos (secured cluster), you have to use the following command:

curl --negotiate -u : -X GET 'http://localhost:50111/templeton/v1/hive?user.name=ekoifman'

Make sure you have a valid kerberos ticket (run: klist)

Re: curl with hive on secured cluster

bdurai — Fri, 04 Mar 2016 09:22:55 GMT

I generally add "-b ~/cookie.txt -c ~/cookie.txt" also the curl command. And "-i" will give addition information also.

curl --negotiate -u : -b ~/cookie.txt -c ~/cookie.txt ...

Re: curl with hive on secured cluster

garunkumar85 — Mon, 07 Mar 2016 06:47:44 GMT

Thanks @Jonas Straub @bdurai for your comments.

In user.name what value should I pass? is it a kerberos principal of the user who is the executing the command

This is what I got after I ran the above command.

~> curl --negotiate -u : -X GET 'http://WebdhcatserverDNS:50111/templeton/v1/hive?user.name=ekoifman' {"error":null}:~> curl --negotiate -u : -X GET 'http://WebhcatserverDNS:50111/templeton/v1/hive?user.name=ekoifman

Re: curl with hive on secured cluster

thejas — Sat, 25 Feb 2017 08:43:13 GMT

User.name would be ignored during kerberos mode. The credentials via kinit is what gets used.

Re: curl with hive on secured cluster

thejas — Fri, 05 May 2017 09:08:20 GMT

"localhost" doesn't work with kerberos authentication, you need the actual hostname in URL. @Jonas Straub can you please edit ?