zhouyifan279 opened a new issue #1009:
URL: https://github.com/apache/incubator-kyuubi/issues/1009


   ### 1. Describe the feature
   This is a sub task of #913 after sub task #1007.
   A HiveDelegationTokenProvider is implemented to obtain delegation tokens 
from Hive metastore server.
   
   ### 2. Motivation
   See #913
   
   ### 3. Describe the solution
   Hive configurations file, usually named hive-site.xml, should be placed 
under `$KYUUBI_HOME/conf/` or set in `$KYUUBI_HOME/conf/kyuubi-defaults.conf`.  
   `kyuuib.kinit.principal` should be enabled to impersonate users in Hive 
metastore server.
   
   If `hive.metastore.uris` is set and `hive.metastore.sasl.enabled` is set to 
true, it means that we are talking to a kerberos-secured remote Hive metastore. 
In this case, delegation tokens are required. Else, delegation tokens are not 
required.
   Use `HiveMetaStoreClient#getDelegationToken(String owner, String 
renewerKerberosPrincipalName)` to obtain delegation tokens.
   
   ### 4. Additional context
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to