1. I needs to be on of the Impala daemons. They will act as the connection manager, coordinator, and still execute queries. 2. The Impala daemon has its own ports and it has one specifically for clients like the impala-shell and ones coming over ODBC and JDBC. The latter should be 21050, by default. 3. CM and HUE have they own backend authentication that can be separate than CDH. Use the auth. mech. to match CDH. 4. SSL is only needed if Impala is configured to use SSL. Since you have CM access, you should be able to review the CM configs. I don't have the specific settings on hand but search for anything related to SSL, TLS, or Kerberos. You can also verify the port and the hostnames of the Impala daemons. ... View more