zhaohehuhu commented on code in PR #13642: URL: https://github.com/apache/dolphinscheduler/pull/13642#discussion_r1161435369
########## docs/docs/en/guide/datasource/kyuubi.md: ########## @@ -18,25 +18,17 @@ | Database name | Enter the database name of the KYUUBI connection. | | Jdbc connection parameters | Parameter settings for KYUUBI connection, in JSON format. | -## Use HiveServer2 HA ZooKeeper +```Kerberos Authentication +just simply configure them in the connection parameters if kerberos authentication is required. -NOTICE: If Kerberos is disabled, ensure the parameter `hadoop.security.authentication.startup.state` is false, and parameter `java.security.krb5.conf.path` value sets null. -If **Kerberos** is enabled, needs to set the following parameters in `common.properties`: +clientKeytab: path of Kerberos keytab file for client authentication -```conf -# whether to startup kerberos -hadoop.security.authentication.startup.state=true +clientPrincipal: Kerberos principal for client authentication -# java.security.krb5.conf path -java.security.krb5.conf.path=/opt/krb5.conf - -# login user from keytab username [email protected] - -# login user from keytab path -login.user.keytab.path=/opt/hdfs.headless.keytab +serverPrincipal: Kerberos principal configured by kyuubi.kinit.principal at the server side. serverPrincipal is available since 1.7.0, for previous versions, use principal instead. Review Comment: done ########## docs/docs/zh/guide/datasource/kyuubi.md: ########## @@ -14,23 +14,14 @@ - 数据库名：输入连接 KYUUBI 的数据库名称 - Jdbc 连接参数：用于 KYUUBI 连接的参数设置，以 JSON 形式填写 -## 使用 HiveServer2 HA Zookeeper +```Kerberos 验证 +如需Kerberos验证，请直接配置相应参数在jdbc连接参数中 -注意：如果没有开启 kerberos,请保证参数 `hadoop.security.authentication.startup.state` 值为 `false`, -参数 `java.security.krb5.conf.path` 值为空. 开启了 **kerberos**，则需要在 `common.properties` 配置以下参数 +clientKeytab: 用户客户端验证的keytab文件路径 -```conf -# whether to startup kerberos -hadoop.security.authentication.startup.state=true +clientPrincipal: 用户客户端验证的Kerberos principal -# java.security.krb5.conf path -java.security.krb5.conf.path=/opt/krb5.conf - -# login user from keytab username [email protected] - -# login user from keytab path -login.user.keytab.path=/opt/hdfs.headless.keytab +serverPrincipal: 在服务端通过kyuubi.kinit.principal配置的Kerberos principal. serverPrincipal在kyuubi 1.7.0后启用，针对老版本请使用principal Review Comment: done -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
