Created 06-25-2025 11:38 PM
Dear Support Team,
I hope this message finds you well.
I am currently working on setting up Trino to query data from Hive. However, I am encountering difficulties related to Kerberos authentication. Despite following available documentation, I have not been able to successfully connect to the Hive. I think there is something wrong with my KERBEROS settings. When I use telnet or ping, I can connect to HIVE correctly, but when I use trino CLI, it shows that it is socket is closed by peer.
I would appreciate your guidance on:1. I would like to ask whether I need to set up Kerberos separately for trino connection? 2. How can I get relevant information about kerberos authentication, such as keytab.
Here are some details about my setup:(I think maybe at least this information is needed, but I don't know where to get them as following)1.hive.metastore.client.principal=trino.example.com 2.hive.metastore.client.keytab=trino.keytab .
Please let me know if there are any files I should provide. And thank you in advance for your support.
Created 06-27-2025 06:00 AM
The principal name may not be complete. Check the keytab and use the principal name it returns:
klist -kt trino.keytab
The Trino principal should include the realm (e.g. trino@YOURREALM ). And if it's a host-based principal it may include the hostname as well (trino/node1.yourdomain.com@YOURREALM). So you might have something like this where _HOST is a placeholder:
trino/_HOST@EXAMPLE.COM. See this document. for more details.
You should also add the full path to the keytab.
If these don't fix it, it might be helpful to know what error messages you are getting on the Trino side and Hive side.
Created 09-04-2025 05:27 AM
hi @huimin,
perfect!
if you could describe the solution you implemented, it will help others who encounter the same issue.
hugs.