question Re: Hive Ambari View coniguration for Hive SSL in Archives of Support Questions (Read Only)

Hive Ambari View coniguration for Hive SSL

sroberts — Thu, 02 Jun 2016 21:57:56 GMT

What configuration is required in the Hive Ambari View for supporting Hive SSL?

Re: Hive Ambari View coniguration for Hive SSL

bandarusridhar1 — Thu, 02 Jun 2016 21:59:24 GMT

Are you looking for this

http://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_Ambari_Security_Guide/content/_optional_set_up_ssl_for_ambari.html

Re: Hive Ambari View coniguration for Hive SSL

sroberts — Fri, 03 Jun 2016 00:07:25 GMT

@Sri Bandaru- No. That's for Ambari HTTPS. I'm referring to SSL of HiveServer2 connections.

Re: Hive Ambari View coniguration for Hive SSL

asinghal — Fri, 03 Jun 2016 00:58:08 GMT

@Sean Roberts, Is there any specific reason you are looking for SSL and not using kerberos authentication instead?

I can see kerberos authentication documentation.(but not sure if there is any for SSL)

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.0.0/bk_ambari_views_guide/content/section_kerberos_setup_hive_view.html

Re: Hive Ambari View coniguration for Hive SSL

sroberts — Fri, 03 Jun 2016 01:03:49 GMT

As far as I know Kerberos is for authentication. Not the encryption of Hive communication.

Re: Hive Ambari View coniguration for Hive SSL

asinghal — Fri, 03 Jun 2016 01:14:12 GMT

@Sean Roberts, you can use kerberos authentication instead and configure SASL for encrypting traffic

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.0.0/bk_ambari_views_guide/content/section_kerberos_setup_hive_view.html

you can encrypt the traffic by enabling following property with your kerberos authentication.

<property>
<name>hive.server2.thrift.sasl.qop</name>
<value>auth-conf</value>
<description>Sasl QOP value; one of 'auth', 'auth-int' and 'auth-conf'</description>
</property>

Change the HIVE AUTHENTICATION field as per the above document to add sasl.qop=auth-conf at the end

auth=kerberos;principal=hive/_HOST@hortoworks.com;sasl.qop=auth-conf

Re: Hive Ambari View coniguration for Hive SSL

sangeeta_e_ravi — Wed, 08 Mar 2017 13:20:01 GMT

I have the same question. I am trying to run Ambari Hive view when HiveServer2 is SSL enabled, but get the following error.

java.lang.NullPointerException at org.apache.ambari.view.hive2.internal.HiveConnectionWrapper.isLoginError(HiveConnectionWrapper.java:115) at org.apache.ambari.view.hive2.internal.HiveConnectionWrapper.connect(HiveConnectionWrapper.java:87) at org.apache.ambari.view.hive2.resources.browser.ConnectionService.attemptHiveConnection(ConnectionService.java:102) at org.apache.ambari.view.hive2.resources.browser.ConnectionService.attemptConnection(ConnectionService.java:85) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498)

If I disable SSL, view executes without error.

For beeline, I provide additional parameters

beeline>!connect jdbc:hive2://hostname:10000/default;ssl=true;sslTrustStore=/var/log/ambari-server/hive-next-view/hive.jks;trustStorePassword=********

How do I provide the same info in the Hive view?

Re: Hive Ambari View coniguration for Hive SSL

asreekumar — Fri, 10 Mar 2017 07:48:34 GMT

In View Config try setting sslTrustStore=/var/log/ambari-server/hive-next-view/hive.jks;trustStorePassword=******** as Hive Session param

Re: Hive Ambari View coniguration for Hive SSL

sangeeta_e_ravi — Fri, 10 Mar 2017 08:34:56 GMT

Thanks for the help.

I was able to run the view after setting the Hive session param to ssl=true;sslTrustStore=/var/log/ambari-server/hive-next-view/hive.jks;trustStorePassword=********