Kerberos Driver Collection

Transwarp Inceptor

jdbc:hive2://IP address:Port number/Database name;principal=hive/Host name@Uppercase realm name;authentication=kerberos;kuser=Principal;keytab=Keytab file path

Transwarp Inceptor

Principal in the URL:

The value of Principal is composed of three parts in the format of xxx/xxx@xxx.

The value of Host name is not an IP address, but the machine name.

The value of Principal needs to meet the rules in the hive-site.xml file.

Hive (single node)

jdbc:hive2://IP address:Port number/Database name;principal=hive/Host name@Uppercase realm name

Universal Hive version: hive

Hive 2.x version: hive2.x

Hive 3.x version: hive3.x

Hive (with ZooKeeper, commonly used for clusters)

jdbc:hive2://IP address of ZooKeeper node 1:Port number/ ,IP address of ZooKeeper node 2:Port number/ ,IP address of ZooKeeper node 3:Port number/ ;serviceDiscoveryMode=zooKeeper; zooKeeperNamespace=ZooKeeper namespace; principal=hive/Virtual host name@Uppercase realm name

ZooKeeper

Confirm that Zookeeper requires Kerberos authentication by checking the version of its core JAR packages.

Ensure that the used ZooKeeper JAR package is a database built-in one.

Check the relevant configuration of ZooKeeper.

Apache Impala

jdbc:impala://IP address:Port number/Database name;AuthMech=1;KrbHostFQDN=quickstart.cloudera;KrbServiceName=impala

Impala

Ensure that the principal concatenated by values of KrbHostFQDN and KrbServiceName can pass Kerberos authentication.