question Re: Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2? in Archives of Support Questions (Read Only)

Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2?

toide — Thu, 09 Aug 2018 13:03:56 GMT

Is it possible to enable multiple authentication mechanisms simultaneously in HiveServer2?

e.g. SIMPLE + LDAP, LDAP + Kerberos

Or, selecting PAM authentication and controlling multiple authentication mechanisms in PAM configuration is the solution to my question?

Re: Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2?

falbani — Fri, 10 Aug 2018 00:44:08 GMT

@Takefumi Oide

No, but you can have multiple hiveserver2 processes configured with different authentication mechanisms.

Lets say you need to have all the auth mechanisms listed above, then you add 1 hiveserver 2 process and configure it with SIMPLE+LDAP and then add another hiveserver2 process and configure it with LDAP+Kerberos.

With ambari this can be done using config groups.

HTH

*** If you found this answer addressed your question, please take a moment to login and click the "accept" link on the answer.

Re: Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2?

toide — Fri, 10 Aug 2018 07:11:21 GMT

Thank you for your answer and suggestion.

You wrote "configure it with SIMPLE+LDAP and then add another hiveserver2 process and configure it with LDAP+Kerberos". It looks like we can use multiple authentication mechanisms in 1 HS2 process ("SIMPLE+LDAP"), but it is just a copy-and-paste from my question, right? I'm sorry for my confusing expression. "SIMPLE+LDAP" I wrote in my question was intended "using SIMPLE auth and LDAP auth simultaneously".

Unfortunately having 2 HS2 instances is not suited for my case, but in another case, I thought this is helpful if there's strong request to do so.

Re: Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2?

falbani — Fri, 10 Aug 2018 20:51:57 GMT

@Takefumi Oide only 1 authentication mechanism per hiveserver2 - sorry for the confusion, I did copy pasted 🙂 - So that would be 4 hiveserver2 with single authentication mechanisms each.

Re: Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2?

toide — Fri, 10 Aug 2018 20:56:10 GMT

OK! Thank you for your reply.

Re: Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2?

hamdan — Sat, 11 Aug 2018 07:33:46 GMT

Use Knox

If you are going to authenticate using LDAP use Knox IP eg.(jdbc:hive2://<knox_host>:8443/;ssl=true;sslTrustStore=/var/lib/knox/data/security/keystores/gateway.jks;trustStorePassword=<master_secret>;transportMode=http;httpPath=gateway/default/hive)

and if you are going to use simple auth. connect to hive jdbc directly (zookeeper or hive server IP).

Re: Is it possible to enable 2 or more authentication mechanism simultaneously in HiveServer2?

toide — Sat, 11 Aug 2018 07:55:03 GMT

Thank you for your answer!

Unfortunately, I can't use Knox in my case. But this way is very interesting.