Engine KERBEROS Authentication
When deploying Indexima in a YARN context, you can use Kerberos to authenticate your Hadoop services.
Configuration
Modify your conf/galactica.conf file by adding the following lines:
galactica.conf
yarn.kerberos = true
Then specify the principal and keytable in the hive-sive.xml file, like you would for the Hive server.
hive-sive.xml
<property>
<name>hive.server2.authentication</name>
<value>KERBEROS</value>
</property>
<property>
<name>hive.server2.authentication.kerberos.principal</name>
<value>robert/_HOST@INDEXIMA.COM</value>
</property>
<property>
<name>hive.server2.authentication.kerberos.keytab</name>
<value>/etc/security/keytabs/robert.service.keytab</value>
</property>
Before (re)starting Indexima
Before starting Indexima, don't forget to do a kinit on every node.
Following the example above, the command would be
kinit -kt /etc/security/keytabs/robert.service.keytab hive/$(hostname -f)@INDEXIMA.COM
Then, start Indexima.