01-25-2017 01:15 PM
I'm using zeppelin to run report using impala.
I downloaded impala JDBC to my linux machine, when i'm looking at the impala queries at cloudera manager, i see my queries running with empty user " ".
I didn't integrate LDAP authnitication yet with Impala.
I have 2 small questions:
1- where and how i can pass the user that i need the queries to run with in the impala JDBC?
2- How i can restrict only queries qith user specific to run.
01-25-2017 06:48 PM
The answer for your 2nd question first, You have to implement apache sentry to restrict user specific query access on impala. Work with your Hadoop admin to setup it on your cluster
now for the first (generic) question, obviously you have to pass the parameter from the source. Apache sentry has dependency on other security tool called kerberos which has a concept called keytab. so when you pass the user and password from the source, you also have to pass the keytab to authenticate your network. you can achieve your first requirement with this step
I've shared some high level security information in the below link, hope this will give some idea
01-25-2017 07:04 PM
01-25-2017 07:30 PM
I think you didn't get my point yet,
You don't need to provide user name for impala instead you can authenticate your table in two steps
1. Network authentication using Kerberos
2. Query/Table level authentication using Apache Sentry
so when you call the query using JDBC, you need to pass user, passworld & keytab
01-25-2017 07:38 PM
I got your point, but currently i don't have any authentication that i'm using.
How i can enforce the queries running through specific impala JDBC to run with specific user.
Maybe i'm missing something in the concept.
02-01-2017 08:03 AM
That version should have been downloaded from Cloudera and as such the downloaded file comes with its own version number. The current version is 2.5.36 and can be found here: http://www.cloudera.com/downloads/connectors/impala/jdbc/2-5-36.html
Please have a look at the documentation contained in that download ("Cloudera-JDBC-Driver-for-Impala-Install-Guide.pdf"), especially at the section "Using User Name" and the "UID" parameter.