原 Removing Hive Metastore Password from Hive Configuration

最新推荐文章于 2024-07-07 17:07:18 发布

houzhizhen

最新推荐文章于 2024-07-07 17:07:18 发布

阅读量206

点赞数

分类专栏： hive

hive 专栏收录该内容

162 篇文章

订阅专栏

本文介绍了一种使用Credential Provider来安全地存储Hive Metastore密码的方法，通过创建密码别名并更新Hive配置文件，可以有效地提高Hive系统的安全性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1.Set up the CredentialProvider to store the Hive Metastore password, using the key javax.jdo.option.ConnectionPassword (the same key as used in the Hive configuration).

$ hadoop credential create javax.jdo.option.ConnectionPassword -provider jceks://file/usr/lib/hive/conf/hive.jceks
Enter password: 
Enter password again: 
javax.jdo.option.ConnectionPassword has been successfully created.
org.apache.hadoop.security.alias.JavaKeyStoreProvider has been updated.

2.Update the Hive configuration to use the designated CredentialProvider. For example to use our /usr/lib/hive/conf/hive.jceks file:

 <!-- Configure credential store for passwords-->
  <property>
    <name>hadoop.security.credential.provider.path</name>
    <value>jceks://file/usr/lib/hive/conf/hive.jceks</value>
  </property>

3.Remove the Hive Metastore password entry (javax.jdo.option.ConnectionPassword) from the Hive configuration. The CredentialProvider will be used instead.

4.Restart Hive Metastore Server/HiveServer2.