Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]
Created 03-03-2016 06:03 PM
How can I run curl with hive command in secured cluster?
curl -s -d execute="select+*+from+pokes;" \
-d statusdir="pokes.output" \
'http://localhost:50111/templeton/v1/hive?user.name=ekoifman'in user.name - I tried to pass Hive Principal and keytab didnt work and tried with user principal didnt work. can you please provide some example?
Created 03-03-2016 08:50 PM
Usually when you want to use curl in combination with Kerberos (secured cluster), you have to use the following command:
curl --negotiate -u : -X GET 'http://localhost:50111/templeton/v1/hive?user.name=ekoifman'
Make sure you have a valid kerberos ticket (run: klist)
Created 03-03-2016 08:50 PM
Usually when you want to use curl in combination with Kerberos (secured cluster), you have to use the following command:
curl --negotiate -u : -X GET 'http://localhost:50111/templeton/v1/hive?user.name=ekoifman'
Make sure you have a valid kerberos ticket (run: klist)
Created 03-04-2016 01:22 AM
I generally add "-b ~/cookie.txt -c ~/cookie.txt" also the curl command. And "-i" will give addition information also.
curl --negotiate -u : -b ~/cookie.txt -c ~/cookie.txt ...
Created 05-05-2017 02:08 AM
"localhost" doesn't work with kerberos authentication, you need the actual hostname in URL. @Jonas Straub can you please edit ?
Created 03-06-2016 10:47 PM
Thanks @Jonas Straub @bdurai for your comments.
In user.name what value should I pass? is it a kerberos principal of the user who is the executing the command
This is what I got after I ran the above command.
~> curl --negotiate -u : -X GET 'http://WebdhcatserverDNS:50111/templeton/v1/hive?user.name=ekoifman' {"error":null}:~> curl --negotiate -u : -X GET 'http://WebhcatserverDNS:50111/templeton/v1/hive?user.name=ekoifman
Created 02-25-2017 12:43 AM
User.name would be ignored during kerberos mode. The credentials via kinit is what gets used.