question Re: Hive ODBC on Kerberos in Archives of Support Questions (Read Only)

Hive ODBC on Kerberos

kerra — Fri, 15 Sep 2017 03:22:04 GMT

When I give the hive ODBC configuration as follows, I am getting this error:

[Hortonworks][Hardy] (34) Error from server: Bad Status: HTTP/1.1 500 Server Error.

Configuration:

Service discovery mode: No Service Discovery

Host: Knox gateway host

Port: 8443 (Knox port)

Authentication mechanism: Username and Password

Thrift transport: HTTP

Re: Hive ODBC on Kerberos

Shelton — Fri, 15 Sep 2017 04:15:52 GMT

odbc-kerberos.jpg@kerra

If you cluster is Kerberized you MUST choose under you cluster is Kerberized you MUST choose under Authentication Kerberos ,REALM Host FQDN etc

Re: Hive ODBC on Kerberos

ajay_kumar — Fri, 15 Sep 2017 04:20:50 GMT

@kerra Check if HiveServer2 you are trying to connect is configured properly in knox. Also check if HiveServer2 is set to

hive.server2.transport.mode=http

If zookeeper hosts are accessible than i will recommend using discovery as it will auto detect port,host and other details. Are you able to connect to hive via beeline?

Re: Hive ODBC on Kerberos

kerra — Fri, 15 Sep 2017 19:06:24 GMT

@Geoffrey Shelton Okot Thanks Geoffrey. I got it to work. Used Kerberos as the authentication mechanism. Hive was expecting a Kerberos ticket from Knox.

@Ajay Thanks. Will try with Zookeeper. Yes, able to connect to Hive via beeline. And I have HTTP as the transport mode.

Re: Hive ODBC on Kerberos

kerra — Fri, 15 Sep 2017 22:54:25 GMT

Some other steps taken:

1. Create a knox.crt file

2. Place it in the cacerts folder in /etc/pki/java

3. Download this cert to the machine where ODBC needs to be configured.

4. Give this path in the SSL options, in the ODBC configuration and check the 'enable SSL' box.

5. Give Kerberos as authentication mechanism, in the ODBC configuration.

6. Give knox URL and port as the host and port, in the ODBC configuration

Re: Hive ODBC on Kerberos

Shelton — Sat, 16 Sep 2017 01:10:42 GMT

@kerra

Was it self signed certificate of CA?