HiveServer Lease Isolation

Scenario

• This function applies to Hive.
• This function can be enabled to specify specific users to access HiveServer services on specific nodes, achieving HiveServer resource isolation.

Procedure

This section describes how to set lease isolation for user hiveuser for existing HiveServer instances.

1. Log in to FusionInsight Manager.
2. Choose Cluster > Services > Hive and click HiveServer.
3. In the HiveServer list, select the HiveServer for which lease isolation is configured and choose HiveServer > Instance Configurations > All Configurations.
4. In the upper right corner of the All Configurations page, search for hive.server2.zookeeper.namespace and specify its value, for example, hiveserver2_zk.
5. Click Save. In the dialog box that is displayed, click OK.
6. Choose Cluster > Services > Hive. Click More and select Restart Service. In the dialog box displayed, enter the password to restart the service.
7. Run the beeline -u command to log in to the client and run the following command:

   beeline -u "jdbc:hive2://10.5.159.13:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2_zk;sasl.qop=auth-conf;auth=KERBEROS;principal=hive/hadoop.<System domain name>@<System domain name>"

   Replace 10.5.159.13 with the IP address of any ZooKeeper instance. To query the IP address, choose Cluster > Services > ZooKeeper and click Instance.

   hiveserver2_zk following zooKeeperNamespace= is set to the value of hive.server2.zookeeper.namespace in 4.

   As a result, only the HiveServer whose lease isolation is configured can be logged in.

   

   • After this function is enabled, you must run the preceding command during login to access the HiveServer for which lease isolation is configured. If you run the beeline command to log in to the client, only the HiveServer that is not isolated by the lease is accessed.
   • You can log in to FusionInsight Manager, choose System > Permission > Domain and Mutual Trust, and view the value of Local Domain, which is the current system domain name. hive/hadoop.<system domain name> is the username. All letters in the system domain name contained in the username are lowercase letters.