Attribute

ServicePrincipalName (SPN)

Purpose

The service principal name to be used by driver for Kerberos authentication.

Valid Values

ServicePrincipalName

where:

ServicePrincipalName
is the three-part service principal name registered with the key distribution center (KDC).
Note: Your service principal name is the value of the hive.server2.authentication.kerberos.principal property in the hive-site.xml file.

You must specify the service principal name using the following format:

Service_Name/Fully_Qualified_Domain_Name@REALM.COM

where:

Service_Name
is the name of the service hosting the instance. For example, yourservicename.

Depending on the Hive distribution you use, the name of the service is defined either automatically by the server or manually by the user who created the service. For instance, Cloudera Data Platform distributions automatically generate a service name of hive, while Apache Hadoop distributions require that the service name be manually defined by the user. Refer to your distribution's documentation for additional information.

Fully_Qualified_Domain_Name

is the fully qualified domain name of the host machine. For example, yourserver.example.com.

REALM.COM

is the domain name of the host machine. This part of the value must be specified in upper-case characters. For example, EXAMPLE.COM.

Example

The following is an example of a valid service principal name:

yourservicename/yourserver.example.com@EXAMPLE.COM

Notes

  • If unspecified, the value of the Network Address option is used as the service principal name.
  • If Authentication Method is set to 0 or -1, the value of the Service Principal Name option is ignored.

Default

None

GUI Tab

Security tab