hive-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From mhd wrk <mhdwrkoff...@gmail.com>
Subject Configuring hive server to proxy the connecting user at the Hadoop level
Date Fri, 28 Dec 2018 08:57:54 GMT
In my kerberosied environment the only way I can get the hive server to
proxy a non Hadoop-level superuser at HDFS level is to use Trusted
Delegation as explained here
<https://www.cloudera.com/documentation/enterprise/5-8-x/topics/cdh_sg_hiveserver2_security.html#concept_vjq_c3x_nm>.
According to the snippet below seems that there's a way to configure the
server to proxy non superusers as well.Has anyone done this before? Do you
know where I can find more information?

HiveServer2 determines the identity of the connecting user from the
> underlying authentication subsystem (Kerberos or LDAP). Any new session
> started for this connection runs on behalf of this connecting user. If the
> server is configured to proxy the user at the Hadoop level, then all
> MapReduce jobs and HDFS accesses will be performed with the identity of the
> connecting user.
>


thanks

Mime
View raw message