This is an automated email from the ASF dual-hosted git repository.
morningman pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new fe4ef23489 [fix](doc) add essential property for hive catalog on
Kerberosied hms (#16781)
fe4ef23489 is described below
commit fe4ef23489ba5754463faede3b5c5685d9fbeb33
Author: Yulei-Yang <yulei.yang0...@gmail.com>
AuthorDate: Fri Feb 17 09:54:29 2023 +0800
[fix](doc) add essential property for hive catalog on Kerberosied hms
(#16781)
property `hive.metastore.kerberos.principal` is essential when the
principal of hms you are connecting is not the
default value: hive-metastore/_HOST@your_realms。
otherwise, you will get error: Failure unspecified at GSS-API level
(Mechanism level: Checksum failed)
---
docs/en/docs/lakehouse/multi-catalog/hive.md | 3 +++
docs/zh-CN/docs/lakehouse/multi-catalog/hive.md | 2 ++
2 files changed, 5 insertions(+)
diff --git a/docs/en/docs/lakehouse/multi-catalog/hive.md
b/docs/en/docs/lakehouse/multi-catalog/hive.md
index 826980e221..29f52e83ed 100644
--- a/docs/en/docs/lakehouse/multi-catalog/hive.md
+++ b/docs/en/docs/lakehouse/multi-catalog/hive.md
@@ -85,6 +85,7 @@ CREATE CATALOG hive PROPERTIES (
'hadoop.security.authentication' = 'kerberos',
'hadoop.kerberos.keytab' = '/your-keytab-filepath/your.keytab',
'hadoop.kerberos.principal' = 'your-princi...@your.com',
+ 'hive.metastore.kerberos.principal' = 'your-hms-principal',
'yarn.resourcemanager.address' = 'your-rm-address:your-rm-port',
'yarn.resourcemanager.principal' =
'your-rm-principal/your-rm-addr...@your.com'
);
@@ -93,6 +94,8 @@ CREATE CATALOG hive PROPERTIES (
Remember `krb5.conf` and `keytab` file should be placed at all `BE` nodes and
`FE` nodes. The location of `keytab` file should be equal to the value of
`hadoop.kerberos.keytab`.
As default, `krb5.conf` should be placed at `/etc/krb5.conf`.
+Value of `hive.metastore.kerberos.principal` should be same with the same name
property used by HMS you are connecting to, which can be found in
`hive-site.xml`.
+
To provide Hadoop KMS encrypted transmission information:
```sql
diff --git a/docs/zh-CN/docs/lakehouse/multi-catalog/hive.md
b/docs/zh-CN/docs/lakehouse/multi-catalog/hive.md
index f2f0f32806..43b32f1df7 100644
--- a/docs/zh-CN/docs/lakehouse/multi-catalog/hive.md
+++ b/docs/zh-CN/docs/lakehouse/multi-catalog/hive.md
@@ -83,12 +83,14 @@ CREATE CATALOG hive PROPERTIES (
'hadoop.security.authentication' = 'kerberos',
'hadoop.kerberos.keytab' = '/your-keytab-filepath/your.keytab',
'hadoop.kerberos.principal' = 'your-princi...@your.com',
+ 'hive.metastore.kerberos.principal' = 'your-hms-principal',
'yarn.resourcemanager.address' = 'your-rm-address:your-rm-port',
'yarn.resourcemanager.principal' =
'your-rm-principal/your-rm-addr...@your.com'
);
```
请在所有的 `BE`、`FE` 节点下放置 `krb5.conf` 文件和 `keytab` 认证文件，`keytab`
认证文件路径和配置保持一致，`krb5.conf` 文件默认放置在 `/etc/krb5.conf` 路径。
+`hive.metastore.kerberos.principal` 的值需要和所连接的 hive metastore 的同名属性保持一致，可从
`hive-site.xml` 中获取。
提供 Hadoop KMS 加密传输信息，示例如下：
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org
For additional commands, e-mail: commits-h...@doris.apache.org
