Versions Compared

Old Version 3

changes.mady.by.user Kalpana Malladi

Saved on

compared with

New Version 4

changes.mady.by.user Kalpana Malladi

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

Overview

The Hive Snap Pack supports KNOX configuration using Cloudera Data Platform authentication. You can use the Generic Hive Database Account to connect to the Hive database through the knox reverse proxy by using a given workload user's credentials. The Clouderra Data Platform (CDP) requires authentication through Knox reverse proxy and it uses the Workload user's credentials or a service account. The Knox reverse proxy hides the complex details for managing kerberos based authentication and authorization from the client. The Cloudera Workload user credentials are used to authenticate against Knox reverse proxy and subsequently connect to the Hive database.

Prerequisites

  • Valid Cloudera Workload user credentials.

  • Clouder instance.

Info

This document provides details assuming you have an existing Data Hub Cluster in Cloudera Data Platform.

Locate Details in Cloudera

To validate your Generic Hive Database account in SnapLogic against the Clouder Knox reverse proxy, you must have the following details:

...

  1. Log in to Cloudera Data Platform portal (https://sso.cloudera.com) or register yourself if you do not have an account.
    The Cloudera home page is displayed.

  2. Click your Profile icon and select Cloudera Data Platform. For example, Cloudera Data Platform US West. You will be redirected to the Clouderra Data Services pagePlatform.
    To demonstrate the procedure of accessing the details from CDP, we are using Cloudera Data Platform US West.

  3. Under Data Management, click the Management Console card.

  4. Click Data Hub Clusters. The list of hub clusters is displayed.

    Image Added


  5. Click the Data Hub Cluster that is active and running.

    Image RemovedImage Added


  6. Under Cloudera Manager Info, click the Endpoints tab.
    All services that are running on the CDP is are displayed.

  7. Copy or make note of the JDBC URL of the Hive Server to use it in the Generic Hive Database Account.


  8. Navigate to User Management.

  9. Click the <user> and select Profile and make note of the Workload credentials.

    Image RemovedImage Added


Configuring Generic Hive Database Account with Cloudera

  1. Drag the Hive Execute Snap.

  2. Add the Generic Hive Database Account to the Snap.

  3. Enter the Username and Password of your Cloudera workload. (See Step 8 above.)

  4. Enter the JDBC URL of the Hive Server.
    Note: By default, the raw URL is got from Cloudera; you have to enter the port number right after the domain and update the SSL value from true to 1; wherein 0 is false and 1 is true. (Refer Step 6 above)
    If the cluster is SSL enabled, the default value of SSL is true in JDBC URL; replace it with 1. For example (JDBC URL : jdbc:hive2://data-hub-cluster-1-gateway.snap-tea.j7vi-6hdh.a3.cloudera.site:443/;ssl=1;transportMode=http;httpPath=data-hub-cluster-1/cdp-proxy-api/hive)

    1. Enter the Site number as 443.

    2. If the SSL is enabled on the Hive server, leave SSL as true. If the SSL is not enabled on the server, enter SSL as 0 or 1. Add example url format below after change:

  5. Upload the JDBC Driver. You can download the latest JDBC Hive driver from here.

  6. Specify the JDBC Driver Class as com.cloudera.hive.jdbc.HS2Driver.

  7. Click Validate. Your account should be validated successfully.

...