We have HDP 2.5.3 deployed on
RedHat Linux with Phoenix Query Server (PQS) in front of Phoenix+HBase. Our
plan is to use ODBC on Windows Server through Phoenix Query Server to access
We are looking for a solution WITHOUT
using Kerberos. We would like to turn on httpS on the PQS to secure the connection.
The data flow would look like this.
We tested that once the ODBC DSN is configured with a
username and password, the request sent out from it to PQS does use HTTP Basic
We need help on:
Are these above configurations possible? Thanks for any help!
"How to have PQS turn on HTTP Basic authentication to authenticate the calls from ODBC?"
This is not supported by PQS, but the code exists in Avatica to support it.
Your only route presently is to modify Phoenix to support this.
"How to turn on httpS on PQS to secure the connection?"
This presently is not supported by PQS.
"How to impersonate the calls from PQS to HBase with the authenticated user?"
This is only supported via SPNEGO authentication in PQS.
Again, you can modify Phoenix to support this but there is no out of the box solution.
You can consider the use of Apache Knox to sit between the ODBC driver and PQS which would provide TLS and configurable authentication.
View solution in original post
Thank you very much for your reply. Could you take a look at question: https://community.hortonworks.com/questions/83220/how-to-use-knox-to-securely-access-hbase-through-o...?