This is an example how to set a proxy user using Impyla (
https://github.com/cloudera/impyla)
>>> import impala.dbapi as impyla
>>> c = impyla.connect(host='localhost', port='21050')
>>> c.cursor(user='foo', configuration={'impala.doas.user': 'bar'})
On Wed, Dec 19, 2018 at 6:32 PM Shant Hovsepian <[email protected]>
wrote:
> Try DelegationUID=admin instead
>
> On Wed, Dec 19, 2018, 7:08 PM mhd wrk <[email protected]> wrote:
>
>> Changed client to Beeline with the following JDBC URL
>>
>>
>> jdbc:impala://cluster:21050/;AuthMech=1;KrbRealm=example.COM;KrbHostFQDN=cluster;KrbServiceName=impala;[email protected]
>>
>> It fails complaining
>>
>> AnalysisException: Syntax error in line 1:
>> SET [email protected]
>>
>> Is there any specific settings need to be set for this working?
>>
>>
>>
>> On Wed, Dec 19, 2018 at 11:47 AM Fredy Wijaya <[email protected]>
>> wrote:
>>
>>> Impala supports proxy user via HS2:
>>> https://github.com/apache/impala/blob/master/be/src/service/impala-hs2-server.cc#L321.
>>> If you use any HS2 client, you should be able to set the proxy user.
>>> Unfortunately, Impala shell still uses Beeswax, which has no support for
>>> proxy user. There's a JIRA to migrate Impala shell to HS2:
>>> https://issues.apache.org/jira/browse/IMPALA-7290.
>>>
>>> On Wed, Dec 19, 2018 at 12:31 PM mhd wrk <[email protected]> wrote:
>>>
>>>> Trying to use Impala in a kerberosied environment and my observation is
>>>> that when queries are submitted via impala-shell requests are treated as
>>>> coming from kerberose service account running the service. Is there a way
>>>> to pass a proxy user instead.
>>>>
>>>> As an example, in Hive Beeline, we achieve this by using a 'connect'
>>>> command as below:
>>>>
>>>> !connect
>>>> jdbc:hive2://cluster:10000/;principal=hive/[email protected];*[email protected]
>>>> <[email protected]>*
>>>>
>>>