Connecting Tableau to Hiveserver2 using Kerberos

caleb_pagel — Sun, 18 Aug 2019 06:34:50 GMT

While trying to create a Tableau datasource using the "Hortonworks ODBC Driver for Apache Hive", I am receiving the error below. I know it is using the correct credentials because if I don't have the principal created in the MIT Kerberos, I receive an error about having the correct credentials.

Unable to connect to the ODBC Data Source. Check that the necessary drivers are installed and that the connection properties are valid. [Hortonworks][Hardy] (34) Error from server: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Server not found in Kerberos database). Unable to connect to the server "[removed]". Check that the server is running and that you have access privileges to the requested database.

Environment Details:

Windows 10
Tableau 10.1.1 Desktop
Hortonworks ODBC Driver for Apache Hive - https://www.tableau.com/support/drivers
MIT Kerberos for Windows 4.1 - http://web.mit.edu/kerberos/dist/
HDP 2.6
Hiveserver2
Active Directory

I have already used the steps identified at - https://community.tableau.com/thread/208423 to setup my local machine.

Screenshot:

Several questions if anyone can help:

What Kerberos database is the connector attempting to use? The local desktop? The server database?
What is expected in the "Host FQDN" (Fully Qualified Domain Name) - the name of the KDC server? The tableau server?
Does anyone have a link to the official documentation for the "Hortonworks ODBC Driver for Apache Hive" ODBC connector for Tableau? The download page only has the driver with no instructions.

Re: Connecting Tableau to Hiveserver2 using Kerberos

caleb_pagel — Mon, 05 Jun 2017 20:45:20 GMT

1. The Kerberos database in this context is located at the host specified in the data source connection.

2. This is the host that contains the tickets. Also - this ticket is not necessarily the ticket that you are connecting with, instead it is the ticket-granting ticket for the overall service.

3. No official documentation exists.

In this case the error occurred because the Host FQDN was not specifying the server that contained the authorization and the service name "hive" was needed.

question Re: Connecting Tableau to Hiveserver2 using Kerberos in Archives of Support Questions (Read Only)

Connecting Tableau to Hiveserver2 using Kerberos

Re: Connecting Tableau to Hiveserver2 using Kerberos