Connect to Hive

Steps to prepare and connect to Hive

Lightup account setup: Hive

Hive offers numerous authentication options. You'll need to create or grant a database user SELECT permissions on all table and other data objects you want Lightup to monitor. Use standard DDL and roles.

Authentication mode:

You'll also need to identify (or maybe even configure) whichever authentication/identity service your Hive database uses. Lightup supports three: No Auth, LDAP, and Kerberos.

Set the following for KERBEROS mode:

hive.server2.authentication.kerberos.principal – Kerberos principal for server.

hive.server2.authentication.kerberos.keytab – Keytab for server principal.

Set following for LDAP mode:

hive.server2.authentication.ldap.url – LDAP URL (for example, ldap://hostname.com:389).

hive.server2.authentication.ldap.baseDN – LDAP base DN. (Optional for AD.)

hive.server2.authentication.ldap.Domain – LDAP domain. (Hive 0.12.0 and later.)

See User and Group Filter Support with LDAP Atn Provider in HiveServer2 for other LDAP configuration parameters in Hive 1.3.0 and later.

Connector settings

No Auth -

No identity service is used. Lightup credentials are passed directly to the database.

• Auth Type - Set to No Auth.

• Host - Enter the hostname and port for connecting to Hive.

Kerberos -

Kerberos is running a key pair/ticketing service. You may be prompted to enter information, especially if it's the first time you're connecting Lightup.

Auth Type - Set to Kerberos.

• Host - Enter the hostname and port for connecting to Kerberos

• Service name - the name of the service you want to access to: hiveserver2

LDAP -

LDAP directory service handles connections. You'll need to set up the Lightup user in LDAP. Use the same name and password as for the database user

• Auth Type - Set to LDAP.

• Host - Enter the hostname and port for connecting to Hive

• Username - Enter whichever name you gave the Lightup database user.

• Password - Enter the password for the account you created for Lightup.