Connecting DbVisualizer and DataGrip to Hive with Kerberos enabled
Your thrift server may be SparkThriftServer or Hiveserver2
Prerequisites | Direct connexion | Via a proxy (VPN) |
---|---|---|
1. The thriftserver but be reachable through the proxy | N | Y |
2. Kerberos server must be reachable through the proxy | N | Y |
3. Add the following parameter to DbVisualizer in DBViz Tools > Tools Properties > General > Specify overriden Java VM properties -Djavax.security.auth.useSubjectCredsOnly=false | Y | Y |
4. Create a environment varaible KRB5CCNAME = c:\tmp\CCCACHE | N | Y |
5. The kinit must be done with the java used by DbVisualizer | Y | Y |
6. Add -A option to your Kinit | N | Y |
7. The krb5.ini file must be in c:/Windows | Y | Y |
8. Specify the correct hostnames in the krb5.conf. And the defautl REALM ( default_realm) should be the one used for your cluster | Y | Y |
9. Get TimeVeil JDBC Driver : https://github.com/timveil/hive-jdbc-uber-jar/releases | Y | Y |
10. You must kinit before opening de DBViz | Y | Y |
JDBC connexion chain :
- Transport Mode = Binary : jdbc:hive2://[FQDN serveur Thrift]:[PORT]/default;principal=hive/[FQDN serveur Thrift]@[REALM]
- Transport Mode = HTTP : jdbc:hive2://[FQDN serveur Thrift]:[PORT]/default;principal=hive/[FQDN serveur Thrift]@[REALM];httpPath=cliservice;transportMode=http