Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Deploying Kyuubi Basics Configurations Security 1. Authentication 2. Kinit Auxiliary Service 3. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations via --conf parameter in server starting scripts. Key Default Meaning Since kyuubi.ha.zookeeper .acl.enabled false Set to true if the zookeeper ensemble is kerberized 1.0 .0 kyuubi.ha.zookeeper .connection

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Deploying Kyuubi Basics Configurations Security 1. Authentication 2. Kinit Auxiliary Service 3. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations via --conf parameter in server starting scripts. Key Default Meaning Since kyuubi.ha.zookeeper .acl.enabled false Set to true if the zookeeper ensemble is kerberized 1.0 .0 kyuubi.ha.zookeeper .connection

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Configurations Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations worker thread dura tion 1.0 .0 1.2.7. Ha Key Default Meaning Type Since kyuubi.ha.zookeeper .acl.enabled false Set to true if the zookeeper ensemble is kerberized bool ean 1.0 .0 kyuubi.ha.zookeeper

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Configurations Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations worker thread dura tion 1.0 .0 1.2.7. Ha Key Default Meaning Type Since kyuubi.ha.zookeeper .acl.enabled false Set to true if the zookeeper ensemble is kerberized bool ean 1.0 .0 kyuubi.ha.zookeeper

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Configurations Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers 2. Access idle worker thread dura tion 1.0 .0 1.2.7. Ha Key Default Meaning Type Since kyuubi.ha.zookeeper.acl.enabled false Set to true if the zookeeper ensemble is kerberized bool ean 1.0 .0 kyuubi.ha.zookeeper

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Configurations Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers 2. Access idle worker thread dura tion 1.0 .0 1.2.7. Ha Key Default Meaning Type Since kyuubi.ha.zookeeper.acl.enabled false Set to true if the zookeeper ensemble is kerberized bool ean 1.0 .0 kyuubi.ha.zookeeper

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Configurations Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers 2. Access idle worker thread dura tion 1.0 .0 1.2.7. Ha Key Default Meaning Type Since kyuubi.ha.zookeeper.acl.enabled false Set to true if the zookeeper ensemble is kerberized bool ean 1.0 .0 kyuubi.ha.zookeeper

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds hosts * Further Readings • Hadoop in Secure Mode • Use Kerberos for authentication in Spark 6.3.3 ACL Management Guide • Authorization Modes – Storage-Based Authorization – SQL-Standard Based Authorization /user/hzyanqin in the case above. To fix this problem you need to create this directory first and grant ACL permission for hzyanqin. org.apache.thrift.TApplicationException: Invalid method name: ‘get_table_req’

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds hosts * Further Readings • Hadoop in Secure Mode • Use Kerberos for authentication in Spark 6.3.3 ACL Management Guide • Authorization Modes – Storage-Based Authorization – SQL-Standard Based Authorization /user/hzyanqin in the case above. To fix this problem you need to create this directory first and grant ACL permission for hzyanqin. org.apache.thrift.TApplicationException: Invalid method name: ‘get_table_req’

Supports one Spark application per account(SPA). 3. Supports QUEUE/NAMESPACE Access Control Lists (ACL) 4. Supports metadata & data Access Control Lists Users who have valid accounts could use all kinds Hadoop Cre- dentials Manager is initialized when Kyuubi server starts. Credentials Renewal 6.3.4 ACL Management Guide • Authorization Modes – Storage-Based Authorization – SQL-Standard Based Authorization /user/hzyanqin in the case above. To fix this problem you need to create this directory first and grant ACL permission for hzyanqin. org.apache.thrift.TApplicationException: Invalid method name: ‘get_table_req’