文章目录一、官网说明二、实现三、第二个实现一、官网说明Authentication/Security ConfigurationHiveServer2 supports Anonymous (no authentication) with and without SASL, Kerberos (GSSAPI), pass through LDAP, Pluggable Custom Authentication and Pluggable Authentication Modules (PAM, supported Hive 0.13 onwards).Authentication mode:hive.server2.authentication – Authentication mode, default NONE. Options are NONE (uses plain SASL), NOSASL, KERBEROS, LDAP, PAM and CUSTOM.Set following for CUSTOM mode:hive.server2.custom.authentication.class – Custom authentication class that implements the org.apache.hive.service.auth.PasswdAuthenticationProvider interface.官网SettingUpHiveServer2-Authentication/SecurityConfiguration二、实现实现逻辑实现org.apache.hive.service.auth.PasswdAuthenticationProvider接口打包放到${hive_home}/lib 下配置hive-site.xml 在每一个hiveserver安装的地方重启hiveserver实现类逻辑很简单读取hive.jdbc_passwd.auth配置识别用户和密码。如果没有配置或者匹配不成功则抛出异常。import org.apache.hadoop.conf.Configuration;import org.apache.hadoop.hive.conf.HiveConf;import org.apache.hive.service.auth.PasswdAuthenticationProvider;import org.slf4j.Logger;import org.slf4j.LoggerFactory;import javax.security.sasl.AuthenticationException;/** * Description TODO * Author lianggao * Date 2023/6/12 下午3:45 */public class CustomPasswdAuthenticator implements PasswdAuthenticationProvider{private Logger LOGLoggerFactory.getLogger(CustomPasswdAuthenticator.class);privatestaticfinal String HIVE_JDBC_PASSWD_AUTH_PREFIXhive.jdbc_passwd.auth.%s;private Configuration confnull;publicCustomPasswdAuthenticator(){}publicvoidAuthenticate(String userName,String passwd)throws AuthenticationException{LOG.info(user: userName try login.);String passwdConfthis.getConf().get(String.format(hive.jdbc_passwd.auth.%s,userName));String message;if(passwdConfnull){messageusers ACL configration is not found. user:userName;LOG.info(message);throw newAuthenticationException(message);}elseif(!passwd.equals(passwdConf)){messageuser name and password is mismatch. user:userName;throw newAuthenticationException(message);}}public ConfigurationgetConf(){if(this.confnull){this.confnewConfiguration(newHiveConf());}returnthis.conf;}publicvoidsetConf(Configuration conf){this.confconf;}}修改hive-site.xml!--自定义远程连接用户名和密码--propertynamehive.server2.authentication/namevalueCUSTOM/value!--默认为none修改成CUSTOM--/property!--指定解析jar包--propertynamehive.server2.custom.authentication.class/namevalueorg.apache.hadoop.hive.contrib.auth.CustomPasswdAuthenticator/value/property!--设置用户名和密码--propertynamehive.jdbc_passwd.auth.usename1111/name!--用户名识别为usename1111--valuepswd1111/value!--密码--/property重启hiveserverjps kill-9hive_server_pid nohup./hive--service hiveserver2/tmp/hiveserver2.log21通过beeline连接hive测试beeline-u jdbc:hive2://hostname:10000 -n usename1111 -p pswd1111三、第二个实现可以将用户名、密码提前写到实现类中这样hive-site.xml的配置将更加简练package hive.test;import java.util.Hashtable;import javax.security.sasl.AuthenticationException;import org.apache.hive.service.auth.PasswdAuthenticationProvider;/* javac -cp $HIVE_HOME/lib/hive-service-0.11-mapr.jar SampleAuthenticator.java -d . jar cf sampleauth.jar hive cp sampleauth.jar $HIVE_HOME/lib/. */public class SampleAuthenticator implements PasswdAuthenticationProvider{HashtableString,Stringstorenull;publicSampleAuthenticator(){storenew HashtableString,String();store.put(user1,passwd1);store.put(user2,passwd2);}Override publicvoidAuthenticate(String user,String password)throws AuthenticationException{String storedPasswdstore.get(user);if(storedPasswd!nullstoredPasswd.equals(password))return;throw newAuthenticationException(SampleAuthenticator: Error validating user);}}hive-site.xmlpropertynamehive.server2.authentication/namevalueCUSTOM/value/propertypropertynamehive.server2.custom.authentication.class/namevaluehive.test.SampleAuthenticator/value/property参考https://docs.ezmeral.hpe.com/datafabric-customer-managed/72/Hive/HiveServer2-CustomAuth.html
文章目录一、官网说明二、实现三、第二个实现一、官网说明Authentication/Security ConfigurationHiveServer2 supports Anonymous (no authentication) with and without SASL, Kerberos (GSSAPI), pass through LDAP, Pluggable Custom Authentication and Pluggable Authentication Modules (PAM, supported Hive 0.13 onwards).Authentication mode:hive.server2.authentication – Authentication mode, default NONE. Options are NONE (uses plain SASL), NOSASL, KERBEROS, LDAP, PAM and CUSTOM.Set following for CUSTOM mode:hive.server2.custom.authentication.class – Custom authentication class that implements the org.apache.hive.service.auth.PasswdAuthenticationProvider interface.官网SettingUpHiveServer2-Authentication/SecurityConfiguration二、实现实现逻辑实现org.apache.hive.service.auth.PasswdAuthenticationProvider接口打包放到${hive_home}/lib 下配置hive-site.xml 在每一个hiveserver安装的地方重启hiveserver实现类逻辑很简单读取hive.jdbc_passwd.auth配置识别用户和密码。如果没有配置或者匹配不成功则抛出异常。import org.apache.hadoop.conf.Configuration;import org.apache.hadoop.hive.conf.HiveConf;import org.apache.hive.service.auth.PasswdAuthenticationProvider;import org.slf4j.Logger;import org.slf4j.LoggerFactory;import javax.security.sasl.AuthenticationException;/** * Description TODO * Author lianggao * Date 2023/6/12 下午3:45 */public class CustomPasswdAuthenticator implements PasswdAuthenticationProvider{private Logger LOGLoggerFactory.getLogger(CustomPasswdAuthenticator.class);privatestaticfinal String HIVE_JDBC_PASSWD_AUTH_PREFIXhive.jdbc_passwd.auth.%s;private Configuration confnull;publicCustomPasswdAuthenticator(){}publicvoidAuthenticate(String userName,String passwd)throws AuthenticationException{LOG.info(user: userName try login.);String passwdConfthis.getConf().get(String.format(hive.jdbc_passwd.auth.%s,userName));String message;if(passwdConfnull){messageusers ACL configration is not found. user:userName;LOG.info(message);throw newAuthenticationException(message);}elseif(!passwd.equals(passwdConf)){messageuser name and password is mismatch. user:userName;throw newAuthenticationException(message);}}public ConfigurationgetConf(){if(this.confnull){this.confnewConfiguration(newHiveConf());}returnthis.conf;}publicvoidsetConf(Configuration conf){this.confconf;}}修改hive-site.xml!--自定义远程连接用户名和密码--propertynamehive.server2.authentication/namevalueCUSTOM/value!--默认为none修改成CUSTOM--/property!--指定解析jar包--propertynamehive.server2.custom.authentication.class/namevalueorg.apache.hadoop.hive.contrib.auth.CustomPasswdAuthenticator/value/property!--设置用户名和密码--propertynamehive.jdbc_passwd.auth.usename1111/name!--用户名识别为usename1111--valuepswd1111/value!--密码--/property重启hiveserverjps kill-9hive_server_pid nohup./hive--service hiveserver2/tmp/hiveserver2.log21通过beeline连接hive测试beeline-u jdbc:hive2://hostname:10000 -n usename1111 -p pswd1111三、第二个实现可以将用户名、密码提前写到实现类中这样hive-site.xml的配置将更加简练package hive.test;import java.util.Hashtable;import javax.security.sasl.AuthenticationException;import org.apache.hive.service.auth.PasswdAuthenticationProvider;/* javac -cp $HIVE_HOME/lib/hive-service-0.11-mapr.jar SampleAuthenticator.java -d . jar cf sampleauth.jar hive cp sampleauth.jar $HIVE_HOME/lib/. */public class SampleAuthenticator implements PasswdAuthenticationProvider{HashtableString,Stringstorenull;publicSampleAuthenticator(){storenew HashtableString,String();store.put(user1,passwd1);store.put(user2,passwd2);}Override publicvoidAuthenticate(String user,String password)throws AuthenticationException{String storedPasswdstore.get(user);if(storedPasswd!nullstoredPasswd.equals(password))return;throw newAuthenticationException(SampleAuthenticator: Error validating user);}}hive-site.xmlpropertynamehive.server2.authentication/namevalueCUSTOM/value/propertypropertynamehive.server2.custom.authentication.class/namevaluehive.test.SampleAuthenticator/value/property参考https://docs.ezmeral.hpe.com/datafabric-customer-managed/72/Hive/HiveServer2-CustomAuth.html
