tencent cloud

Feedback

Configuring LDAP Authentication

Last updated: 2024-10-30 11:35:19
    This document introduces the configuration and use of LDAP in Hive on EMR.

    Development Preparation

    Make sure you have activated Tencent Cloud and created an EMR cluster. For more details, see Creating a Cluster.
    Create a Hadoop default scene cluster and select the Hive component in the software configuration interface.

    Enabling LDAP Authentication

    Enter the EMR console, click Cluster Services > HIVE > Configuration Management, select the hive-site.xml configuration file, add the following configuration items, set parameter values, save the configuration and deploy it, and then restart HiveServer2:
    Parameter
    Value
    Remarks
    hive.server2.authentication
    LDAP
    Set the authentication mechanism to LDAP.
    hive.server2.authentication.ldap.url
    ldap://$l{dap_ip}:389
    Specify the URL for the LDAP service.
    ${ldap_ip} represents the IP address of the OPENLDAP service node, which can be found under Cluster Services > OPENLDAP in the EMR console.
    For a self-built LDAP service, fill in the details according to your actual setup.
    hive.server2.authentication.ldap.baseDN
    ou=People,dc=emr,dc=cloud,dc=tencent,dc=com
    The Base DN where the LDAP service user is located in EMR. For a self-built LDAP service, fill in the details according to your actual setup.
    hive.server2.authentication.ldap.guidKey
    cn
    The LDAP service username format in EMR. For a self-built LDAP service, fill in the details according to your actual setup.

    Accessing HiveServer2

    After enabling LDAP authentication, you will need to provide the LDAP username and password to access HiveServer2.

    Connecting to Hive with Beeline Client

    beeline -u "jdbc:hive2://${hs2_ip}:${hs2_port}" -n ${user} -p ${password}

    Connecting to Hive with JDBC

    jdbc:hive2://${hs2_ip}:${hs2_port}/default;user=${user};password=${password}
    Note:
    1. ${user} represents the LDAP username.
    2. ${password} represents the LDAP password.
    3. ${hs2_ip} is the private IP address of the node where the HiveServer2 service is deployed. You can view it on the cluster details page under Cluster Services > Hive > Role Management.
    4. ${hs2_port} is the port number of the HiveServer2 in the cluster, with a default value of 7001. You can view it on the cluster details page under Cluster Services > Hive > Configuration Management by checking the hive.server2.thrift.port setting in the hive-site.xml configuration file.
    Note:
    After integrating Hive with EMR OpenLDAP and adding a new user, grant 644 permissions to the /emr/hive directory under HDFS for the new user to access.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support