Purpose

Specifies the service principal name to be used for Kerberos authentication.

Valid Values

ServicePrincipalName

where:

ServicePrincipalName
is the three-part service principal name registered with the key distribution center (KDC).
Note: The service principal name is the value of the hive.server2.authentication.kerberos.principal property in the hive-site.xml file.

Specify the service principal name using the following format:

Service_Name/Fully_Qualified_Domain_Name@REALM.COM

where:

Service_Name
is the name of the service hosting the instance.

Depending on the Hive distribution you use, the name of the service is defined either automatically by the server or manually by the user who created the service. For instance, Cloudera Data Platform distributions automatically generate a service name of hive, while Apache Hadoop distributions require that the service name be manually defined by the user. Refer to your distribution's documentation for additional information.

Fully_Qualified_Domain_Name

is the fully qualified domain name (FQDN) of the host machine. This value must match the FQDN registered with the KDC. The FQDN consists of a host name and a domain name. For the example myserver.example.com, myserver is the host name and example.com is the domain name.

REALM.COM

is the domain name of the host machine. This value is optional. If no value is specified, the default domain is used. The domain must specified in upper-case characters. For example, EXAMPLE.COM. For Windows Active Directory, the Kerberos realm name is the Windows domain name.

Example

The following is an example of a valid service principal name:

hive/myserver.example.com@EXAMPLE.COM

Notes

  • If AuthenticationMethod is set to userIdPassword, the value of the ServicePrincipalName property is ignored.

Data Source Method

setServicePrincipalName

Default

The driver builds the default value using a value of hive for the service name the setting of the ServerName property for the FQDN. For example, when the Server Name property is set to myserver.example.com, the default value is hive/myserver.example.com.

Note: If the default does not match the service principal name registered with the KDC, then the value of the service principal name registered with the KDC should be specified.

See also