C
csands
Guest
From the ODBC User's Guide and Reference for Apache Hive Service Principal Name Attribute ServicePrincipalName (SPN) Purpose The service principal name to be used by driver for Kerberos authentication. Valid Values ServicePrincipalName where: ServicePrincipalName is the three-part service principal name registered with the key distribution center (KDC). Note: Your service principal name is the value of the hive.server2.authentication.kerberos.principal property in the hive-site.xml file. You must specify the service principal name using the following format: Service_Name/Fully_Qualified_Domain_Name@REALM.COM where: Service_Name is the name of the service hosting the instance. For example, yourservicename. Depending on the Hive distribution you use, the name of the service is defined either automatically by the server or manually by the user who created the service. For instance, CDH distributions automatically generate a service name of hive, while Apache Hadoop distributions require that the service name be manually defined by the user. Refer to your distribution's documentation for additional information. Fully_Qualified_Domain_Name is the fully qualified domain name of the host machine. For example, yourserver.example.com. REALM.COM is the domain name of the host machine. This part of the value must be specified in upper-case characters. For example, EXAMPLE.COM. Example The following is an example of a valid service principal name: yourservicename/yourserver.example.com@EXAMPLE.COM Notes *If unspecified, the value of the Network Address option is used as the service principal name. *If Authentication Method is set to 0 or -1, the value of the Service Principal Name option is ignored. Default None GUI Tab ------------- Authentication Method Attribute AuthenticationMethod (AM) Purpose Specifies the method the driver uses to authenticate the user to the server when a connection is established. If the specified authentication method is not supported by the database server, the connection fails and the driver generates an error. Valid Values 0 | 4 | -1 Behavior If set to 0 (User ID/Password), the driver sends the user ID in clear text and an encrypted password to the server for authentication. If set to 4 (Kerberos Authentication), the driver uses Kerberos authentication. This method supports both Windows Active Directory Kerberos and MIT Kerberos environments. If set to -1 (No Authentication), the driver sends the user ID and password in clear text to the server for authentication. Default 0 (User ID/Password) GUI Tab ---------- GSS Client Library Attribute GSSClient (GSSC) Purpose The name of the GSS client library that the driver uses to communicate with the Key Distribution Center (KDC). The driver uses the path defined by the PATH environment variable for loading the specified client library. Valid Values native | client_library where: client_library is a GSS client library installed on the client. Behavior If set to client_library, the driver uses the specified GSS client library. Note: For MIT Kerberos distributions, you must provide a full path to the MIT Library. For example, the 64-bit version for Windows would use the following value: C:\Program Files\MIT\Kerberos\bin\gssapi64.dll. If set to native, the driver uses the GSS client for Windows Kerberos. All other users must provide the full path to the library name. Default native GUI Tab Security tab
Continue reading...
Continue reading...