JDBC connection string syntax
The JDBC connection string for connecting to a remote Hive client requires a host, port, and Hive database name, and can optionally specify a transport type and authentication.
jdbc:hive2://<host>:<port>/<dbName>;<sessionConfs>?<hiveConfs>#<hiveVars>
Connection string parameters
The following table describes the parameters for specifying the JDBC connection.
JDBC Parameter | Description | Required |
---|---|---|
|
The cluster node hosting HiveServer. |
yes |
|
The port number to which HiveServer listens. |
yes |
|
The name of the Hive database to run the query against. |
yes |
|
Optional configuration parameters for the JDBC/ODBC driver in the
following format:
|
no |
|
Optional configuration parameters for Hive on the server in the following
format: The configurations last for the duration of the user session. |
no |
|
Optional configuration parameters for Hive variables in the following
format: The configurations last for the duration of the user session. |
no |
TCP and HTTP Transport
The following table shows variables for use in the connection string when you configure
HiveServer in remote mode. The JDBC client and HiveServer can use either HTTP or
TCP-based transport to exchange RPC messages. Because the default transport is TCP, there is no need to specify
transportMode=binary
if TCP transport is desired.
transportMode Variable Value | Description |
---|---|
|
Connect to HiveServer2 using HTTP transport. |
|
Connect to HiveServer2 using TCP transport. |
jdbc:hive2://<host>:<port>/<dbName>;transportMode=http;httpPath=<http_endpoint>;<otherSessionConfs>?<hiveConfs>#<hiveVars>
User Authentication
If configured in remote mode, HiveServer supports Kerberos, LDAP, Pluggable Authentication Modules (PAM), and custom plugins for authenticating the JDBC user connecting to HiveServer. The format of the JDBC connection URL for authentication with Kerberos differs from the format for other authentication models. The following table shows the variables for Kerberos authentication.
User Authentication Variable | Description |
---|---|
|
A string that uniquely identifies a Kerberos user. |
|
Quality of protection for the SASL framework. The level of quality is negotiated between the client and server during authentication. Used by Kerberos authentication with TCP transport. |
|
Username for non-Kerberos authentication model. |
|
Password for non-Kerberos authentication model. |
User Authentication Variable | Description |
---|---|
|
A string that uniquely identifies a Kerberos user. |
|
Quality of protection for the SASL framework. The level of quality is negotiated between the client and server during authentication. Used by Kerberos authentication with TCP transport. |
|
Username for non-Kerberos authentication model. |
|
Password for non-Kerberos authentication model. |
jdbc:hive2://<host>:<port>/<dbName>;principal=<HiveServer2_kerberos_principal>;<otherSessionConfs>?<hiveConfs>#<hiveVars>
Transport Layer Security
HiveServer2 supports SSL and Sasl QOP for transport-layer security. The format of the JDBC connection string for SSL differs from the format used by Sasl QOP.
SSL Variable | Description |
|
Specifies whether to use SSL |
|
The path to the SSL TrustStore. |
|
The password to the SSL TrustStore. |
The syntax for using the authentication parameters is:
jdbc:hive2://<host>:<port>/<dbName>;ssl=true;sslTrustStore=<ssl_truststore_path>;trustStorePassword=<truststore_password>;<otherSessionConfs>?<hiveConfs>#<hiveVars>
When using TCP for transport and Kerberos for security, HiveServer2 uses Sasl QOP for encryption rather than SSL.
Sasl QOP Variable | Description |
|
A string that uniquely identifies a Kerberos user. |
|
The level of protection desired. For authentication,
checksum, and encryption, specify |
jdbc:hive2://<host>:<port>/<dbName>;principal=<HiveServer2_kerberos_principal>;saslQop=auth-conf;<otherSessionConfs>?<hiveConfs>#<hiveVars>