hive-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mich Talebzadeh <mich.talebza...@gmail.com>
Subject Re: beeline connection to Hive using both Kerberos and LDAP with SSL
Date Tue, 02 May 2017 18:29:19 GMT
So it translates to either LDAP or Kerberos, we cannot enable both for same
Hive Server. SSL is independent. So the supported situations are as below.



   1. Anonymous authentication (w/ or w/o SSL)
   2. LDAP authentication (w/ or w/o SSL)
   3. Kerberos

Cheers




Dr Mich Talebzadeh



LinkedIn * https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw
<https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw>*



http://talebzadehmich.wordpress.com


*Disclaimer:* Use it at your own risk. Any and all responsibility for any
loss, damage or destruction of data or any other property which may arise
from relying on this email's technical content is explicitly disclaimed.
The author will in no case be liable for any monetary damages arising from
such loss, damage or destruction.



On 30 April 2017 at 18:20, Mich Talebzadeh <mich.talebzadeh@gmail.com>
wrote:

> Thanks Kapil.
>
> Does this mean that one can have both Kerberos and LDAP (with SSL) and use
> either?
>
> Cheers,
>
> Mich
>
> Dr Mich Talebzadeh
>
>
>
> LinkedIn * https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw
> <https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw>*
>
>
>
> http://talebzadehmich.wordpress.com
>
>
> *Disclaimer:* Use it at your own risk. Any and all responsibility for any
> loss, damage or destruction of data or any other property which may arise
> from relying on this email's technical content is explicitly disclaimed.
> The author will in no case be liable for any monetary damages arising from
> such loss, damage or destruction.
>
>
>
> On 25 April 2017 at 22:42, Kapil Rastogi <krastogi@cloudera.com> wrote:
>
>> Starting with CDH 5.7, clusters running LDAP-enabled HiveServer2
>> deployments also accept Kerberos authentication.
>>
>> https://www.cloudera.com/documentation/enterprise/5-8-x/
>> topics/cdh_sg_hiveserver2_security.html
>>
>> Hope that helps.
>> Kapil
>>
>> On Fri, Apr 7, 2017 at 7:58 PM, Gopal Vijayaraghavan <gopalv@apache.org>
>> wrote:
>>
>>>
>>> > Is there anyway one can enable both (Kerberos and LDAP with SSL) on
>>> Hive?
>>>
>>> I believe what you're looking for is Apache Knox SSO. And for LDAP
>>> users, Apache Ranger user-sync handles auto-configuration.
>>>
>>> That is how SSL+LDAP+JDBC works in the HD Cloud gateway [1].
>>>
>>> There might be a similar solution from CDH, if you go digging for it.
>>>
>>> Cheers,
>>> Gopal
>>> [1] - https://hortonworks.github.io/hdp-aws/security-network/#prot
>>> ected-gateway
>>>
>>>
>>>
>>
>

Mime
View raw message