Supported authentication methods v2

Suggest edits

The Hadoop Foreign Data Wrapper supports NOSASL and LDAP authentication modes. To use NOSASL, don't specify any OPTIONS values while creating user mapping. For LDAP authentication mode, specify username and password in OPTIONS while creating user mapping.

Using LDAP authentication

When using the Hadoop Foreign Data Wrapper with LDAP authentication, first configure the Hive server or Spark server to use LDAP authentication. The configured server must provide a hive-site.xml file that includes the connection details for the LDAP server. For example:

<property>
  <name>hive.server2.authentication</name>
  <value>LDAP</value>
  <description>
    Expects one of [nosasl, none, ldap, kerberos, pam, custom].
    Client authentication types.
      NONE: no authentication check
      LDAP: LDAP/AD based authentication
      KERBEROS: Kerberos/GSSAPI authentication
      CUSTOM: Custom authentication provider
              (Use with property hive.server2.custom.authentication.class)
      PAM: Pluggable authentication module
      NOSASL:  Raw transport
  </description>
</property>
<property>
  <name>hive.server2.authentication.ldap.url</name>
  <value>ldap://localhost</value>
  <description>LDAP connection URL</description>
</property>
<property>
  <name>hive.server2.authentication.ldap.baseDN</name>
  <value>ou=People,dc=itzgeek,dc=local</value>
  <description>LDAP base DN</description>
</property>

Then, when starting the Hive server, include the path to the hive-site.xml file in the command. For example:

./hive --config <path_to_hive-site.xml_file> --service hiveServer2

<path_to_hive-site.xml_file> specifies the complete path to the hive‑site.xml file.

When creating the user mapping, you must provide the name of a registered LDAP user and the corresponding password as options. For details, see Create user mapping.

Using NOSASL authentication

When using NOSASL authentication with the Hadoop Foreign Data Wrapper, set the authorization to None and the authentication method to NOSASL on the Hive server or Spark server. For example, if you start the Hive server at the command line, include the hive.server2.authentication configuration parameter in the command:

hive --service hiveserver2 --hiveconf hive.server2.authentication=NOSASL