Is it possible to do kerberos and ssl ?

[#1]

Is it possible to do kerberos and ssl ? We are trying to connect to HS2 with kerberos and ssl

[#2 · Accepted solution]

Yes. I do recommend the following course of action:

1. Setup Ambari with Both LDAP and SSL first
2. Then setup HiveServer2 with LDAP SSL. See the following on HCC: https://community.hortonworks.com/questions/1522/how-to-setup-hiveserver2-authentication-with-ldap.h... and HW docs here
3. Then you can turn SSL On for Hive also. See http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Security_Guide/content/ch_wire-hivese...
4. Then test in Beeline LDAPs authentication with ssl=true
5. Optionally you can setup Knox also with another HiveServer2 for just HTTPs
6. Then do the Kerberos Wizard