Support Questions

Find answers, ask questions, and share your expertise

Connect Trino to Cloudera Hive with Kerberos Authentication

avatar
Frequent Visitor

Dear Support Team,

I hope this message finds you well.

I am currently working on setting up Trino to query data from Hive. However, I am encountering difficulties related to Kerberos authentication.  Despite following available documentation, I have not been able to successfully connect to the Hive. I think there is something wrong with my KERBEROS settings. When I use telnet or ping, I can connect to HIVE correctly, but when I use trino CLI,  it shows that it is socket is closed by peer.

 I would appreciate your guidance on:1. I would like to ask whether I need to set up Kerberos separately for trino connection? 2. How can I get relevant information about kerberos authentication, such as keytab.

Here are some details about my setup:(I think maybe at least this information is needed, but I don't know where to get them as following)1.hive.metastore.client.principal=trino.example.com 2.hive.metastore.client.keytab=trino.keytab .

Please let me know if there are any files I should provide. And thank you in advance for your support.

1 ACCEPTED SOLUTION

avatar
Super Collaborator

The principal name may not be complete. Check the keytab and use the principal name it returns:
klist -kt trino.keytab

The Trino principal should include the realm (e.g. trino@YOURREALM ). And if it's a host-based principal it may include the hostname as well (trino/node1.yourdomain.com@YOURREALM). So you might have something like this where _HOST is a placeholder:
trino/_HOST@EXAMPLE.COM.  See this document. for more details.

You should also add the full path to the keytab.

If these don't fix it, it might be helpful to know what error messages you are getting on the Trino side and Hive side.

View solution in original post

10 REPLIES 10

avatar
Expert Contributor

hi @huimin,

perfect!

if you could describe the solution you implemented, it will help others who encounter the same issue.

hugs.