[GitHub] [incubator-superset] elukey edited a comment on issue #8794: Superset, Presto and Kerberos

[GitBox <gi...@apache.org>]

elukey edited a comment on issue #8794: Superset, Presto and Kerberos
URL: https://github.com/apache/incubator-superset/issues/8794#issuecomment-605603773
 
 
   @clearnote01 everything should work if you use PyHive 0.6.2, I had to use the following configuration in Superset:
   
   ```
   SQLAlchemyURL: presto://hostname.something.com:1234/analytics_hive?protocol=https
   
   Extra:
   {
       "metadata_params": {},
       "engine_params": {
       "connect_args": {
                "KerberosConfigPath": "/etc/krb5.conf",
                "KerberosKeytabPath": "/path/of/the/superset/keytab/superset.keytab",
                "KerberosPrincipal": "superset/hostname.something.com@REALM",
                "KerberosRemoteServiceName": "presto",
                "requests_kwargs": {
                    "verify": "/etc/superset/presto_ca/ca.crt.pem"
                }
          }
      },
   ..cut..
   }
   ```
   Some notes:
   * `analytics_hive` in the SQLAlchemyURL is the name of the Hive catalog, swap it with what you have configured in Presto.
   * The above config is related to using Presto with TLS self signed certificates.
   *  KerberosKeytabPath is the path of the superset keytab on the Superset host
   * KerberosPrincipal is the principal of superset
   * If you want to use "Impersonate the logged on user" then you'll need to make the superset user in hadoop-site.xml as proxy.
   
   Hope it helps :)

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org