Changed client to Beeline with the following JDBC URL jdbc:impala://cluster:21050/;AuthMech=1;KrbRealm=example.COM;KrbHostFQDN=cluster;KrbServiceName=impala;impala.doas.user=ad...@example.com
It fails complaining AnalysisException: Syntax error in line 1: SET impala.doas.user=ad...@example.com Is there any specific settings need to be set for this working? On Wed, Dec 19, 2018 at 11:47 AM Fredy Wijaya <fwij...@cloudera.com> wrote: > Impala supports proxy user via HS2: > https://github.com/apache/impala/blob/master/be/src/service/impala-hs2-server.cc#L321. > If you use any HS2 client, you should be able to set the proxy user. > Unfortunately, Impala shell still uses Beeswax, which has no support for > proxy user. There's a JIRA to migrate Impala shell to HS2: > https://issues.apache.org/jira/browse/IMPALA-7290. > > On Wed, Dec 19, 2018 at 12:31 PM mhd wrk <mhdwrkoff...@gmail.com> wrote: > >> Trying to use Impala in a kerberosied environment and my observation is >> that when queries are submitted via impala-shell requests are treated as >> coming from kerberose service account running the service. Is there a way >> to pass a proxy user instead. >> >> As an example, in Hive Beeline, we achieve this by using a 'connect' >> command as below: >> >> !connect >> jdbc:hive2://cluster:10000/;principal=hive/_h...@example.com;*hive.server2.proxy.user=ad...@example.com >> <ad...@example.com>* >> >
