Support Questions

GrazittiAPI · ‎06-25-2025

Dear Support Team,

I hope this message finds you well.

I am currently working on setting up Trino to query data from Hive. However, I am encountering difficulties related to Kerberos authentication. Despite following available documentation, I have not been able to successfully connect to the Hive. I think there is something wrong with my KERBEROS settings. When I use telnet or ping, I can connect to HIVE correctly, but when I use trino CLI, it shows that it is socket is closed by peer.

I would appreciate your guidance on:1. I would like to ask whether I need to set up Kerberos separately for trino connection? 2. How can I get relevant information about kerberos authentication, such as keytab.

Here are some details about my setup:（I think maybe at least this information is needed, but I don't know where to get them as following）1.hive.metastore.client.principal=trino.example.com 2.hive.metastore.client.keytab=trino.keytab .

Please let me know if there are any files I should provide. And thank you in advance for your support.

james_jones · ‎06-27-2025

The principal name may not be complete. Check the keytab and use the principal name it returns:
klist -kt trino.keytab

The Trino principal should include the realm (e.g. trino@YOURREALM ). And if it's a host-based principal it may include the hostname as well (trino/node1.yourdomain.com@YOURREALM). So you might have something like this where _HOST is a placeholder:
trino/[email protected]. See this document. for more details.

You should also add the full path to the keytab.

If these don't fix it, it might be helpful to know what error messages you are getting on the Trino side and Hive side.

View solution in original post

yagoaparecidoti · ‎09-04-2025

hi @huimin,

perfect!

if you could describe the solution you implemented, it will help others who encounter the same issue.

hugs.

Cloudera Community

Support Questions

Connect Trino to Cloudera Hive with Kerberos Authentication