Closed vitortoledo93 closed 7 years ago
Use a screen capture of CM to show TLS level 1 is enabled.
/etc/krb5.conf:
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = DATACENTRICS.COM
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
udp_preference_limit = 1
default_tgs_enctypes = arcfour-hmac
default_tkt_enctypes = arcfour-hmac
[realms]
DATACENTRICS.COM = {
kdc = keyrussrprd01.datacentrics.com.br
admin_server = keyrussrprd01.datacentrics.com.br
}
[domain_realm]
.datacentrics.com = DATACENTRICS.COM
datacentrics.com = DATACENTRICS.COM```
/var/kerberos/krb5kdc/kdc.conf:
kdc_ports = 88
kdc_tcp_ports = 88
[realms]
DATACENTRICS.COM = {
#master_key_type = aes256-cts
acl_file = /var/kerberos/krb5kdc/kadm5.acl
dict_file = /usr/share/dict/words
admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
max_life = 1d
max_renewable_life = 7d
}
kadm5.acl
*/admin@DATACENTRICS.COM *
Kinit and the Klist Informations:
Sentry First step, showing tables:
scan complete in 2ms
Connecting to jdbc:hive2://keyrussrprd01.datacentrics.com.br:10000/default;principal=hive/keyrussrprd01.datacentrics.com.br@DATACENTRICS.COM
Connected to: Apache Hive (version 1.1.0-cdh5.10.1)
Driver: Hive JDBC (version 1.1.0-cdh5.10.1)
Transaction isolation: TRANSACTION_REPEATABLE_READ
Beeline version 1.1.0-cdh5.10.1 by Apache Hive
0: jdbc:hive2://keyrussrprd01.datacentrics.co> show tables;
INFO : Compiling command(queryId=hive_20170405202222_8dfaf025-2705-4344-a350-a5aad38eb40c): show tables
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:tab_name, type:string, comment:from deserializer)], properties:null)
INFO : Completed compiling command(queryId=hive_20170405202222_8dfaf025-2705-4344-a350-a5aad38eb40c); Time taken: 0.059 seconds
INFO : Executing command(queryId=hive_20170405202222_8dfaf025-2705-4344-a350-a5aad38eb40c): show tables
INFO : Starting task [Stage-0:DDL] in serial mode
INFO : Completed executing command(queryId=hive_20170405202222_8dfaf025-2705-4344-a350-a5aad38eb40c); Time taken: 0.117 seconds
INFO : OK
+-----------+--+
| tab_name |
+-----------+--+
+-----------+--+
No rows selected (0.269 seconds)
0: jdbc:hive2://keyrussrprd01.datacentrics.co>
Showing tables with George And Ferdinand
[root@keyrussrprd01 ~]# kinit george
Password for george@DATACENTRICS.COM:
[root@keyrussrprd01 ~]# beeline -u "jdbc:hive2://keyrussrprd01.datacentrics.com.br:10000/default;principal=hive/keyrussrprd01.datacentrics.com.br@DATACENTRICS.COM"
scan complete in 2ms
Connecting to jdbc:hive2://keyrussrprd01.datacentrics.com.br:10000/default;principal=hive/keyrussrprd01.datacentrics.com.br@DATACENTRICS.COM
Connected to: Apache Hive (version 1.1.0-cdh5.10.1)
Driver: Hive JDBC (version 1.1.0-cdh5.10.1)
Transaction isolation: TRANSACTION_REPEATABLE_READ
Beeline version 1.1.0-cdh5.10.1 by Apache Hive
0: jdbc:hive2://keyrussrprd01.datacentrics.co> show tables;
INFO : Compiling command(queryId=hive_20170405203333_067bdf79-cf44-4d7c-85c2-355a7a1932ab): show tables
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:tab_name, type:string, comment:from deserializer)], properties:null)
INFO : Completed compiling command(queryId=hive_20170405203333_067bdf79-cf44-4d7c-85c2-355a7a1932ab); Time taken: 0.066 seconds
INFO : Executing command(queryId=hive_20170405203333_067bdf79-cf44-4d7c-85c2-355a7a1932ab): show tables
INFO : Starting task [Stage-0:DDL] in serial mode
INFO : Completed executing command(queryId=hive_20170405203333_067bdf79-cf44-4d7c-85c2-355a7a1932ab); Time taken: 0.135 seconds
INFO : OK
+------------+--+
| tab_name |
+------------+--+
| customers |
| sample_07 |
| sample_08 |
| web_logs |
+------------+--+
4 rows selected (0.3 seconds)
0: jdbc:hive2://keyrussrprd01.datacentrics.co> !q
Closing: 0: jdbc:hive2://keyrussrprd01.datacentrics.com.br:10000/default;principal=hive/keyrussrprd01.datacentrics.com.br@DATACENTRICS.COM
[root@keyrussrprd01 ~]# kdestroy
[root@keyrussrprd01 ~]# kinit ferdinand
Password for ferdinand@DATACENTRICS.COM:
[root@keyrussrprd01 ~]# beeline -u "jdbc:hive2://keyrussrprd01.datacentrics.com.br:10000/default;principal=hive/keyrussrprd01.datacentrics.com.br@DATACENTRICS.COM"
scan complete in 2ms
Connecting to jdbc:hive2://keyrussrprd01.datacentrics.com.br:10000/default;principal=hive/keyrussrprd01.datacentrics.com.br@DATACENTRICS.COM
Connected to: Apache Hive (version 1.1.0-cdh5.10.1)
Driver: Hive JDBC (version 1.1.0-cdh5.10.1)
Transaction isolation: TRANSACTION_REPEATABLE_READ
Beeline version 1.1.0-cdh5.10.1 by Apache Hive
0: jdbc:hive2://keyrussrprd01.datacentrics.co> show tables;
INFO : Compiling command(queryId=hive_20170405203333_66714887-6a5a-4a03-b110-2b47efb86e64): show tables
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:tab_name, type:string, comment:from deserializer)], properties:null)
INFO : Completed compiling command(queryId=hive_20170405203333_66714887-6a5a-4a03-b110-2b47efb86e64); Time taken: 0.067 seconds
INFO : Executing command(queryId=hive_20170405203333_66714887-6a5a-4a03-b110-2b47efb86e64): show tables
INFO : Starting task [Stage-0:DDL] in serial mode
INFO : Completed executing command(queryId=hive_20170405203333_66714887-6a5a-4a03-b110-2b47efb86e64); Time taken: 0.137 seconds
INFO : OK
+------------+--+
| tab_name |
+------------+--+
| sample_07 |
+------------+--+
1 row selected (0.298 seconds)
0: jdbc:hive2://keyrussrprd01.datacentrics.co>
Cloudera-scm-agent- Config.ini: