Reverse DNS validation for Kerberos authentication

Kerberos authentication relies on accurate reverse DNS records. While this reverse DNS validation is important for specific connection types, environment activation will not be blocked if the reverse DNS setup is missing or if the specified hostname is invalid. The absence of reverse DNS records only impacts remote client access to Virtual Warehouses using Kerberos authentication (for example, impala-shell and beeline).

Reverse DNS setup is required only if you intend to use remote clients for accessing Virtual Warehouses. If you plan to use Hue, reverse DNS validation is not necessary.

Additionally, reverse DNS validation is only performed if the provided custom hostname for the Kerberos principal is resolvable within the cluster.