elukey commented on issue #8794: Superset, Presto and Kerberos
URL: 
https://github.com/apache/incubator-superset/issues/8794#issuecomment-605603773
 
 
   @clearnote01 everything should work if you use PyHive 0.6.2, I had to use 
the following configuration in Superset:
   
   ```
   SQLAlchemyURL: 
presto://hostname.something.com:1234/analytics_hive?protocol=https
   
   Extra:
   {
       "metadata_params": {},
       "engine_params": {
       "connect_args": {
                "KerberosConfigPath": "/etc/krb5.conf",
                "KerberosKeytabPath": 
"/path/of/the/superset/keytab/superset.keytab",
                "KerberosPrincipal": "superset/hostname.something.com@REALM",
                "KerberosRemoteServiceName": "presto",
                "requests_kwargs": {
                    "verify": "/etc/superset/presto_ca/ca.crt.pem"
                }
          }
      },
   ..cut..
   }
   ```
   Some notes:
   * The above config is related to using Presto with TLS self signed 
certificates.
   *  KerberosKeytabPath is the path of the superset keytab on the Superset host
   * KerberosPrincipal is the principal of superset
   * If you want to use "Impersonate the logged on user" then you'll need to 
make the superset user in hadoop-site.xml as proxy.
   
   Hope it helps :)

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to