[IMPALA-8358] mini cluster should be able to start metastore with Kerberos

• Type: Test
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Epic Color: ghx-label-7
• Assignee: Unassigned
• Reporter: Vihang Karajgaonkar
• Created: 26/Mar/19 00:38
• Updated: 14/May/20 19:37
• Resolved: 14/May/20 19:37

Description

Most production setups will have Kerberos enabled metastore deployed. It would be good to have minicluster should use kerberized metastore to simulate closer to actual deployments.

I see the following configs are disabled for a long time from postgresql-hive-site.xml.template file. Adding them here for reference.

<!-- Having problems getting the metastore up with Kerberos.  Defer for now.
<property>
  <name>hive.metastore.sasl.enabled</name>
  <value>true</value>
  <description>If true, the metastore thrift interface will be secured
    with SASL. Clients must authenticate with Kerberos.</description>
</property>
<property>
  <name>hive.metastore.kerberos.keytab.file</name>
  <value>${KRB5_KTNAME}</value>
</property>
<property>
  <name>hive.metastore.kerberos.principal</name>
  <value>${MINIKDC_PRINC_HIVE}</value>
</property>
-->

Issue Links

• duplicates: IMPALA-9361 Support running kerberized minicluster against manually configured KDC