Support Questions

Find answers, ask questions, and share your expertise

Is it possible to do kerberos and ssl ?

avatar
Master Mentor

Is it possible to do kerberos and ssl ? We are trying to connect to HS2 with kerberos and ssl

1 ACCEPTED SOLUTION

avatar

Yes. I do recommend the following course of action:

  1. Setup Ambari with Both LDAP and SSL first
  2. Then setup HiveServer2 with LDAP SSL. See the following on HCC: https://community.hortonworks.com/questions/1522/how-to-setup-hiveserver2-authentication-with-ldap.h... and HW docs here
  3. Then you can turn SSL On for Hive also. See http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Security_Guide/content/ch_wire-hivese...
  4. Then test in Beeline LDAPs authentication with ssl=true
  5. Optionally you can setup Knox also with another HiveServer2 for just HTTPs
  6. Then do the Kerberos Wizard

View solution in original post

1 REPLY 1

avatar

Yes. I do recommend the following course of action:

  1. Setup Ambari with Both LDAP and SSL first
  2. Then setup HiveServer2 with LDAP SSL. See the following on HCC: https://community.hortonworks.com/questions/1522/how-to-setup-hiveserver2-authentication-with-ldap.h... and HW docs here
  3. Then you can turn SSL On for Hive also. See http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Security_Guide/content/ch_wire-hivese...
  4. Then test in Beeline LDAPs authentication with ssl=true
  5. Optionally you can setup Knox also with another HiveServer2 for just HTTPs
  6. Then do the Kerberos Wizard