ambari中hive启用kerberos进行jdbc连接操作正确方式

Ambari中启用Kerberos后Hive JDBC连接问题解析

最新推荐文章于 2024-05-16 01:03:24 发布

原创

最新推荐文章于 2024-05-16 01:03:24 发布 · 6.7k 阅读

5 ·

CC 4.0 BY-SA版权

启用Kerberos后的Hive JDBC连接可通过直接连接或Zookeeper进行。使用Zookeeper时，需注意配置的Zookeeper地址必须为域名，而非IP，否则会出现SASL认证失败的问题。错误信息显示‘Server not found in Kerberos database’，解决办法是在代码中设置‘sun.security.krb5.debug’属性为true，以便进一步排查问题。

启用kerberos后，有两种操作方式连接hive；

1、直接连接：

jdbc:hive2://c2eng58:10000/default;principal=hive/c2eng58@EXAMPLE.COM

2、通过zookerper连接

jdbc:hive2://c2eng47:2181,c2eng48:2181,c2eng58:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2;

如果设置了JaasConf，注意：此处ambari中填写的zookerper必须为域名地址，不能为ip地址。否则会提示

2018-07-30 16:35:39,087 ERROR [main-SendThread(172.17.81.48:2181)]: An error: (java.security.PrivilegedActionException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - LOOKING_UP_SERVER)]) occurred when evaluating Zookeeper Quorum Member's received SASL token. Zookeeper Client will go to AUTH_FAILED state. org.apache.zookeeper.client.ZooKeeperSaslClient(388)
2018-07-30 16:35:39,090 ERROR [main-SendThread(172.17.81.48:2181)]: SASL authentication with Zookeeper Quorum member failed: javax.security.