Hi Bala,
It sounds like you'll want to use an HBase Delegation Token within the Hive
UDF to connect to HBase. The user will need to obtain an HBase Delegation
Token with their Kerberos Credentials and either give the token to Hive or
Hive will need to get the token on behalf of the user (like Oozie). The
code Oozie uses for getting an HBase token is here:
https://github.com/apache/oozie/blob/master/core/src/main/java/org/apache/oozie/action/hadoop/HbaseCredentials.java
Let me know if you need more details. I've also added some oozie lists,
for people who have used this more recently in case they have any
additional info.
- Robert
On Tue, Oct 16, 2018 at 1:04 PM Bala Chander <bchan...@cloudera.com> wrote:
> Hello Robert,
>
> I have a customer who is writing a UDF (user defined function) in java for
> usage in hive/beeline.
> The UDF contacts HBASE to pull in some data and returns back a single
> value. The USER of hive/beeline can issue a statement like the following:
>
> select a, UDF("xyz") from table_a;
>
> Hive/beeline and HBase operate on kerberos secure cluster.
>
> Michael Yoder (cc'ed) mentioned something similar in Oozie (Delegation
> token based connection for Oozie (OOZIE-1457
> <https://issues.apache.org/jira/browse/OOZIE-1457>)
>
> Do you have a snippet of this code that I can use in above scenario.
> Thanks in advance for reading through this email.
>
> --
> Thanks and best regards,
> *Bala Chander * | Solutions Architect, Services | *Cloudera*
> Phone: +1 408-896-1334
> bchan...@cloudera.com
>
>
