- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
ODBC Driver for Impala with keytab auth Destroys Kerberos ticket cache
- Labels:
-
Apache Impala
Created 09-24-2021 06:44 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We use the Cloudera ODBC Driver for Impala and Cloudera ODBC Driver for Hive inside a service. The service uses a DSN-less connection strings with UseKeytab to authenticate. We do not perform any ticket management, we leave this down to the ODBC driver.
We have observed that connections to hive do not renew the TGT, and will reuse an existing service ticket (expected behaviour).
However, Impala connections renew the TGT on every connection (thus destroying all service tickets..) Impala Service tickets never get reused and the ticket cache is always destroyed. This has to be a bug.
To reproduce..
- Open ODBC Administrator and create a DSN connection to an Impala Server with kerberos keytab authentication.
- Test the connection
- run klist to show tickets
- Test the connection again
- run klist to show the tickets have been renewed
Created 10-04-2021 07:58 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Could you provide more details about your OS and Impala ODBC Driver version? I tested Impala ODBC Driver 2.6.13 on Linux. The driver doesn't renew the ticket for each DSN-less connection on my host.
Created 10-10-2021 10:35 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@RyanAtWork, Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future. If you are still experiencing the issue, can you provide the information @robbiez has requested?
Regards,
Vidya Sargur,Community Manager
Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.
Learn more about the Cloudera Community:
