Reply
New Contributor
Posts: 1
Registered: ‎06-01-2015

Impala Odbc connection using Kerberos under IIS

We have a Kerberos enabled cluster with x-realm authentication on our windows domain.  We want to use the Impala Odbc connection in a C# .NET website running under IIS but we are unsure how to authenticate this.  We can run it under a domain account but this requires manual entry of the username and password in order to refresh the ticket.  Does anyone know our options around this?

 

Thanks

Highlighted
Cloudera Employee
Posts: 7
Registered: ‎06-26-2015

Re: Impala Odbc connection using Kerberos under IIS

If your IIS service is using a domain service account, it should already have a valib Kerberos ticket. In that case, your connection string to Impala doesn't need username and password. I should be something like the below:

 

jdbc:hive2://<datanode_fqdn>:21050/default;principal=<impala_principal>

 

The impala principal is usually impala/<datanode_where_impala_is_running_fqdn>@YOUR.DOMAIN.REALM

 

If the IIS service is running with a LOCAL account it won't have a ticket to successfully connect to Impala. If that's the case, you have two options:

  • Change the service account to a domain account
  • Create a keytab file containing the ticket for the principal you want to use to connect to impala and load that keytab from your application code before attempting the connection with the same connection string above.

Hope this helps.

Andre

 

Announcements

Our community is getting a little larger. And a lot better.


Learn More about the Cloudera and Hortonworks community merger planned for late July and early August.