Skip to main contentSkip to search
Powered by Zoomin Software. For more details please contactZoomin
Progress DocumentationProgress Documentation
Progress Documentation
  • Home
  • Home
  • EnglishČeštinaDeutsch (Germany)Español (Spain)Français (France)Italiano (Italy)Português (Brasil)日本語Русский (Russia)中文 (简体) (China)中文 (繁體, 台灣) (Taiwan)ar-AR
  • Login

Progress DataDirect for ODBC for Apache Hive Wire Protocol Driver User's Guide Release 8.0.1

Summary of authentication-related options

Save PDF
Save selected topicSave selected topic and subtopicsSave all topics
Share
Share to emailCopy topic URL
Print
Table of Contents
  • Welcome to the Progress DataDirect for ODBC for Apache Hive Wire Protocol Driver
    • What's new in this release?
    • Driver requirements
    • ODBC compliance
    • Version string information
      • getFileVersionString function
    • Data types
      • Retrieving data type information
    • SQL support
    • Additional information
    • Troubleshooting
    • Contacting Technical Support
  • Getting started
    • Configuring and connecting on Windows
      • Configuring a data source
      • Testing the connection
    • Configuring and connecting on UNIX and Linux
      • Environment configuration
      • Test loading the driver
      • Configuring a data source in the system information file
      • Testing the connection
  • Tutorials
    • The Example application
    • Accessing data in Power BI (Windows only)
    • Accessing data in Tableau (Windows only)
    • Accessing data in Microsoft Excel (Windows only)
    • Accessing data in Microsoft Excel from the Query Wizard (Windows only)
  • Using the driver
    • Configuring and connecting to data sources
      • Configuring the product on UNIX/Linux
        • Environment variables
          • Library search path
          • ODBCINI
          • ODBCINST
          • DD_INSTALLDIR
        • The test loading tool
        • Data source configuration on UNIX/Linux
          • Configuration through the system information (odbc.ini) file
            • Sample default odbc.ini file
        • DSN-less connections
          • Sample odbcinst.ini file
        • File data sources
        • UTF-16 applications on UNIX and Linux
      • Data source configuration through a GUI
        • Advanced tab
        • Security tab
      • Using a connection string
      • Password Encryption Tool (UNIX/Linux only)
      • Using a logon dialog box
      • HTTP mode
    • Performance considerations
    • Using security
      • Authentication
        • Kerberos authentication
          • Apache Sentry
        • Summary of authentication-related options
          • Connection string examples for configuring authentication
          • odbc.ini file examples for configuring authentication
      • Data encryption across the network
      • TLS/SSL encryption
        • Certificates
        • TLS/SSL server authentication
          • Using SQL_COPT_INMEMORY_TRUSTSTORECERT
          • Importing root certificates into the Windows certificate store
            • Importing root certificates using Certificate Import Wizard
            • Importing root certificates using a PowerShell script
        • TLS/SSL client authentication
        • Generating TLS/SSL certificates using OpenSSL 3.5-compliant algorithms
        • Designating an OpenSSL library
    • Apache Knox
    • Apache ZooKeeper
      • Configuring Apache ZooKeeper for Kerberos authentication
    • Isolation and lock levels supported
    • Unicode support
    • Binding parameter markers
    • Using arrays of parameters
    • Limitations on Apache Hive functionality
    • Materialized views
    • Stored procedures
    • Packet logging
  • Connection option descriptions
    • Array Size
    • Array Fetch Size
    • Array Insert Size
    • Authentication Method
    • Batch Mechanism
    • Catalog Mode
    • Cookie Name
    • Crypto Protocol Version
    • CryptoLibName
    • Data Source Name
    • Database Name
    • Default Buffer Size for Long/LOB Columns (in Kb)
    • Description
    • Enable Cookie Authentication
    • Enable FIPS
    • Enable SQLDescribeParam
    • Encryption Method
    • GSS Client Library
    • Host Name
    • Host Name In Certificate
    • HTTP Path
    • IANAAppCodePage
    • Key Password
    • Keystore
    • Keystore Password
    • Login Timeout
    • Max String Size
    • Min Long Varchar Size
    • OpenSSLConfigFile
    • OpenSSLProviderPath
    • Password
    • Port Number
    • Proxy User
    • Remove Column Qualifiers
    • Service Principal Name
    • SSLLibName
    • String Describe Type
    • TCP Keep Alive
    • Transaction Mode
    • Transport Mode
    • Truststore
    • Truststore Password
    • Use Current Schema for Catalog Functions
    • Use Native Catalog Functions
    • Use Unicode Char Types
    • User Name
    • Validate Server Certificate
    • Varchar Threshold
    • Zookeeper Namespace
    • Zookeeper Discovery
  • SQL functionality
    • Data Definition Language (DDL)
    • Selecting Data With the Driver
      • Select List
        • Column Name Qualification
    • From Clause
    • Group By Clause
    • Having Clause
    • Order By Clause
    • For Update Clause
    • Set Operators
    • Subqueries
    • SQL Expressions
      • Constants
      • Numeric Operators
      • Character Operator
      • Relational operators
      • Logical Operators
      • Functions
    • Restrictions
      • Merge Restrictions
      • Stored Procedures
      • Views
      • Other Restrictions
  • Copyright
Table of Contents

Summary of authentication-related options

Save PDF
Save selected topicSave selected topic and subtopicsSave all topics
Share
Share to emailCopy topic URL
Print
  • Last Updated: October 23, 2020
  • 1 minute read
    • DataDirect Connectors
    • ODBC
    • Apache Hive 8.0
    • Documentation

The following tables describe the connection options used for User ID/Password and Kerberos Authentication. The connection options are listed alphabetically by the GUI name that appears on the driver Setup dialog box. The connection string attribute name is listed in parentheses. See "Connection option descriptions" for details about configuring the options.

Table 1. Summary: User ID/Password Authentication Connection Options
Option Description
User ID/Password Authentication
Authentication Method (AuthenticationMethod) Specifies the method the driver uses to authenticate the user to the server when a connection is established.

If set to 0 (User ID/Password), the driver sends the user ID in clear text and an encrypted password to the server for authentication.

If set to -1 (No Authentication), the driver sends the user ID and password in clear text to the server for authentication.

If set to 4 (Kerberos Authentication), the driver uses Kerberos authentication. This method supports both Windows Active Directory Kerberos and MIT Kerberos environments.

Default: 0 User ID/Password

Proxy User (ProxyUser) Specifies the UserID used for Impersonation and Trusted Impersonation. When impersonation is enabled on the server, this value determines your identity and access rights to files when executing queries.

Default: None. If no value is provided for this option or if impersonation is disabled, you will execute queries as the user who initiated the HiveServer process.

User Name (LogonID) The default user ID that is used to connect to your database.

Default: None

Additional Properties for Session Cookie Based Authentication (HTTP Mode only)
Cookie Name (CookieName) Specifies the name of the cookie used for authenticating HTTP requests when HTTP mode (TransportMode=1) and session cookie based authentication are enabled (EnableCookieAuthentication=1).
Default: If no value is specified, the driver attempts to use the following cookie names by default:
  • hive.server2.auth (Hive connections)
  • hadoop.auth (Apache Knox connections)
  • JSESSIONID (Apache Knox connections)
Enable Cookie Authentication (EnableCookieAuthentication) Determines whether the driver attempts to use session cookie based authentication for requests to an HTTP endpoint after the initial authentication to the server. Cookie based authentication improves response time by eliminating the need to re-authenticate with the server for each request.

If set to 0 (Disabled), the driver does not use cookie based authentication for HTTP requests after the initial authentication.

If set to 1 (Enabled), the driver attempts to use cookie based authentication for requests to an HTTP endpoint after the initial authentication to the server. The cookie used for authentication is specified by the Cookie Name option. If the name does not match, or authentication fails, the driver attempts to authenticate according to the setting of the Authentication Method option.

Default: 1 (Enabled)

Table 2. Summary: Kerberos Authentication Connection Options
Option Description
Authentication Method (AuthenticationMethod) Specifies the method the driver uses to authenticate the user to the server when a connection is established.

If set to 0 (User ID/Password), the driver sends the user ID in clear text and an encrypted password to the server for authentication.

If set to -1 (No Authentication), the driver sends the user ID and password in clear text to the server for authentication.

If set to 4 (Kerberos Authentication), the driver uses Kerberos authentication. This method supports both Windows Active Directory Kerberos and MIT Kerberos environments.

Default: 0 User ID/Password

GSS Client Library (GSSClient) The name of the GSS client library that the driver uses to communicate with the Key Distribution Center (KDC).

Default: native (the driver uses the GSS client for Windows Kerberos. )

Service Principal Name (ServicePrincipalName) The service principal name to be used by driver for Kerberos authentication.

Default: None.

User Name (LogonID) The default user ID that is used to connect to your database.

Default: None

Contents
  • Connection string examples for configuring authentication
  • odbc.ini file examples for configuring authentication
Related Links
  • Connection option descriptions
TitleResults for “How to create a CRG?”Also Available inAlert