Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Impala: Authenticate with Kerberos using a "received" keytab file.

avatar
Explorer

Hello,

 

I am building a REST API server that relays queries to Impala.

 

The REST API will receive keytab file from the client server, and want to proxy Kerberos authentication on the API side.

 

The following sequence.


[Client Server]  --  send keytab  -->  [REST API]  -->  ODBC or JDBC  --> [Impala]

 

In order to realize the above, I think that it is necessary to dynamically authenticate ODBC using the keytab received on the REST API side. is there such a thing possible?

 

For example, HDFS Java API can pass and transfer arbitrary keytab as follows.

 

UserGroupInformation.loginUserFromKeytab("hdfs@CLOUDERA", "/etc/hadoop/conf/hdfs.keytab");

 

However, Impala's ODBC or JDBC document shows that you are preparing a static file (UPNKeytabMappingFile) that defines pairs of user principals and keytab files.

 

{
"cloudera": {
"principal" : "cloudera@CLOUDERA",
"keytab": "/tmp/cloudera.keytab"
},

 

Is there a way to authenticate with keytab received from client without predefining it?

 

Thank you in advance.

 

1 ACCEPTED SOLUTION

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login
1 REPLY 1

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login