Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Acces Hive Via Knox Gatewy URL

Highlighted

Acces Hive Via Knox Gatewy URL

Explorer

Hi,

My environment is kerberized with multple nodes. So we would like to acces hive db via knox gateway setup. I am facing some issue. the following steps:

in HDFS:

hadoop.proxyuser.hive.groups=*

hadoop.proxyuser.hive.hosts=*

hadoop.proxyuser.knox.groups=*

hadoop.proxyuser.knox.hosts=*


Configured the server2 transports and SASL:

hive.server2.transport.mode=http

hive.server2.thrift.sasl.qop=auth-conf


in Ranger:

Knox Topology = default

Knox Service = HIVE


i have extracted the knox certificat using the following cmd:

shell> cd /usr/hdp/current/knox-server/data/security/keystores/

shell> keytool -exportcert -alias gateway-identity -keystore ./gateway.jks -file knox.crt


Created a client keystore and imported the certificate on a client machine

shell> keytool -keystore clientkeystore.jks -genkey -alias client

shell> keytool -import -keystore clientkeystore.jks -file knox.crt


And finally i tried to connect using beeline on my client machine (i am able to connect to a non kerized hadoop environment)

shell> beeline -u jdbc:hive2://<knox host>:8443/;ssl=true;sslTrustStore=<keystore client path>=< keystore pwd>;user=<ad username>;password=<adpassword>hive.server2.transport.mode=http;hive.server2.thrift.http.path=gateway/default/hive


SLF4J: Class path contains multiple SLF4J bindings.

SLF4J: Found binding in [jar:file:/home/client77/Documents/HDP/apache-hive-3.1.0-bin/lib/log4j-slf4j-impl-2.10.0.jar!/org/slf4j/impl/StaticLoggerBinder.class]

SLF4J: Found binding in [jar:file:/home/client77/Documents/HDP/hadoop-3.0.1/share/hadoop/common/lib/slf4j-log4j12-1.7.25.jar!/org/slf4j/impl/StaticLoggerBinder.class]

SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.

SLF4J: Actual binding is of type [org.apache.logging.slf4j.Log4jLoggerFactory]

Connecting to jdbc:hive2://<knox host>:8443/

19/07/17 09:10:34 [main]: WARN jdbc.HiveConnection: Failed to connect to <knox host>:8443

Unexpected end of file when reading from HS2 server. The root cause might be too many concurrent connections. Please ask the administrator to check the number of active connections, and adjust hive.server2.thrift.max.worker.threads if applicable.

Error: Could not open client transport with JDBC Uri: jdbc:hive2://<knox host>:8443/: null (state=08S01,code=0).


Not sure about the missing steps, could you please help?


Thank you