Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Hive Ambari View coniguration for Hive SSL

Solved Go to solution
Highlighted

Hive Ambari View coniguration for Hive SSL

What configuration is required in the Hive Ambari View for supporting Hive SSL?

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Hive Ambari View coniguration for Hive SSL

Contributor

In View Config try setting sslTrustStore=/var/log/ambari-server/hive-next-view/hive.jks;trustStorePassword=******** as Hive Session param

View solution in original post

8 REPLIES 8
Highlighted

Re: Hive Ambari View coniguration for Hive SSL

Highlighted

Re: Hive Ambari View coniguration for Hive SSL

@Sri Bandaru- No. That's for Ambari HTTPS. I'm referring to SSL of HiveServer2 connections.
Highlighted

Re: Hive Ambari View coniguration for Hive SSL

@Sean Roberts, Is there any specific reason you are looking for SSL and not using kerberos authentication instead?

I can see kerberos authentication documentation.(but not sure if there is any for SSL)

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.0.0/bk_ambari_views_guide/content/section_kerbe...

Highlighted

Re: Hive Ambari View coniguration for Hive SSL

As far as I know Kerberos is for authentication. Not the encryption of Hive communication.

Highlighted

Re: Hive Ambari View coniguration for Hive SSL

@Sean Roberts, you can use kerberos authentication instead and configure SASL for encrypting traffic

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.0.0/bk_ambari_views_guide/content/section_kerbe...

you can encrypt the traffic by enabling following property with your kerberos authentication.

<property>
<name>hive.server2.thrift.sasl.qop</name>
<value>auth-conf</value>
<description>Sasl QOP value; one of 'auth', 'auth-int' and 'auth-conf'</description>
</property>

Change the HIVE AUTHENTICATION field as per the above document to add sasl.qop=auth-conf at the end

auth=kerberos;principal=hive/_HOST@hortoworks.com;sasl.qop=auth-conf
Highlighted

Re: Hive Ambari View coniguration for Hive SSL

New Contributor

I have the same question. I am trying to run Ambari Hive view when HiveServer2 is SSL enabled, but get the following error.

java.lang.NullPointerException at org.apache.ambari.view.hive2.internal.HiveConnectionWrapper.isLoginError(HiveConnectionWrapper.java:115) at org.apache.ambari.view.hive2.internal.HiveConnectionWrapper.connect(HiveConnectionWrapper.java:87) at org.apache.ambari.view.hive2.resources.browser.ConnectionService.attemptHiveConnection(ConnectionService.java:102) at org.apache.ambari.view.hive2.resources.browser.ConnectionService.attemptConnection(ConnectionService.java:85) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498)

If I disable SSL, view executes without error.

For beeline, I provide additional parameters

beeline>!connect jdbc:hive2://hostname:10000/default;ssl=true;sslTrustStore=/var/log/ambari-server/hive-next-view/hive.jks;trustStorePassword=********

How do I provide the same info in the Hive view?

Re: Hive Ambari View coniguration for Hive SSL

Contributor

In View Config try setting sslTrustStore=/var/log/ambari-server/hive-next-view/hive.jks;trustStorePassword=******** as Hive Session param

View solution in original post

Highlighted

Re: Hive Ambari View coniguration for Hive SSL

New Contributor

Thanks for the help.

I was able to run the view after setting the Hive session param to ssl=true;sslTrustStore=/var/log/ambari-server/hive-next-view/hive.jks;trustStorePassword=********

Don't have an account?
Coming from Hortonworks? Activate your account here