lishulong's blog

Superset 接入带有kerberos 验证 的 presto 的hive

SqlAlchemy URI: presto://10.122.0.1:7521/hive?protocol=https

Extra:

{
	"metadata_params": {},
	"engine_params": {
		"connect_args": {
			"KerberosConfigPath": "/data/krb_conf/krb5.conf",
			"KerberosKeytabPath": "/data/auth/presto.keytab",
			"KerberosPrincipal": "presto@xxxxxxxx.COM",
			"KerberosRemoteServiceName": "presto",
			"requests_kwargs": {
				"verify": "/data/auth/presto.pem"
			}
		}
	},
	"metadata_cache_timeout": {},
	"schemas_allowed_for_csv_upload": []
}

/data/auth/presto.pem 生成策略

echo -n | openssl s_client -showcerts -connect 10.122.0.1:7521 > presto.pem