0
点赞
收藏
分享

微信扫一扫

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer

德州spark 2022-09-21 阅读 172

温馨提示:要看高清无码套图,请使用手机打开并单击图片放大查看。


Fayson的github:

​​https://github.com/fayson/cdhproject​​


提示:代码块部分可以左右滑动查看噢


1.文档编写目的



前面Fayson介绍了《​​如何在CDH中启用Spark Thrift​​​》和《​​如何在Kerberos环境下的CDH集群部署Spark1.6 Thrift及spark-sql客户端​​》,本篇文章Fayson主要介绍如何使用Java JDBC连接非Kerberos和Kerberos环境下Spark ThriftServer服务。

  • 内容概述

1.环境准备

2.非Kerberos及Kerberos环境连接示例


  • 测试环境


1.Kerberos和非Kerberos集群CDH5.12.1,OS为Redhat7.2


  • 前置条件

1.Spark1.6的ThriftServer服务正常


2.环境准备



1.创建Java工程jdbcdemo


如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_hive


2.添加Maven依赖


    <dependencies>
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-client</artifactId>
<version>2.6.5</version>
</dependency>
<dependency>
<groupId>org.apache.hive</groupId>
<artifactId>hive-jdbc</artifactId>
<version>1.1.0</version>
</dependency>
</dependencies>

(可左右滑动)

3.非Kerberos环境示例



1.启动非Kerberos环境下的Spark ThriftServer服务


[root@cdh04 ~]# cd /opt/cloudera/parcels/CDH/lib/spark/sbin/
[root@cdh04 sbin]# ./stop-thriftserver.sh
[root@cdh04 sbin]# rm -rf ../logs/*
[root@cdh04 sbin]# export HADOOP_USER_NAME=hive
[root@cdh04 sbin]# ./start-thriftserver.sh --hiveconf hive.server2.thrift.port=10001 \
> --hiveconf hive.server2.thrift.bind.host=0.0.0.0 \
> --hiveconf hive.server2.enable.doAs=true


(可左右滑动)

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_spark_02


2.在工程目录下新建NoneKBSample.java文件,内容如下:


package com.cloudera.spark1jdbc;
import com.cloudera.utils.JDBCUtils;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
/**
* package: com.cloudera.sparkjdbc
* describe: 使用JDBC的方式访问非Kerberos环境下Spark1.6 Thrift Server
* creat_user: Fayson
* email: htechinfo@163.com
* creat_date: 2018/6/1
* creat_time: 上午10:21
* 公众号:Hadoop实操
*/
public class NoneKBSample {
private static String JDBC_DRIVER = "org.apache.hive.jdbc.HiveDriver";
private static String CONNECTION_URL ="jdbc:hive2://cdh04.fayson.com:10001/";
static {
try {
Class.forName(JDBC_DRIVER);
} catch (Exception e) {
e.printStackTrace();
}
}
public static void main(String[] args) {
System.out.println("使用JDBC的方式访问非Kerberos环境下Spark1.6 Thrift Server");
Connection connection = null;
ResultSet rs = null;
PreparedStatement ps = null;
try {
connection = DriverManager.getConnection(CONNECTION_URL, "hive", "");
ps = connection.prepareStatement("select * from test");
rs = ps.executeQuery();
while (rs.next()) {
System.out.println(rs.getInt(1) + "-------" + rs.getString(2));
}
} catch (Exception e) {
e.printStackTrace();
} finally {
JDBCUtils.disconnect(connection, rs, ps);
}
}
}


(可左右滑动)

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_java_03


3.示例代码运行


如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_java_04


4.Kerberos环境示例



连接Kerberos环境下的Spark1.6 ThriftServer需要准备krb5.conf文件及keytab文件。

1.将CDH集群中的krb5.conf配置文件拷贝至本地开发环境

# Configuration snippets may be placed in this directory as well
includedir /etc/krb5.conf.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = FAYSON.COM
#default_ccache_name = KEYRING:persistent:%{uid}
[realms]
FAYSON.COM = {
kdc = cdh01.fayson.com
admin_server = cdh01.fayson.com
}
[domain_realm]
.fayson.com = FAYSON.COM
fayson.com = FAYSON.COM

(可左右滑动)

在集群KDC和Kadmin所在服务,导出一个用于连接Spark ThriftServer服务的keytab文件


[root@cdh01 ~]# kadmin.local
kadmin.local: xst -norandkey -k fayson.keytab fayson@FAYSON.COM
kadmin.local: exit


(可左右滑动)

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_spark_05

检查导出的fayson.keytab文件


如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_java_06


2.启动Spark1.6的ThriftServer服务


./start-thriftserver.sh --hiveconf hive.server2.authentication.kerberos.principal=hive/cdh04.fayson.com@FAYSON.COM \
--hiveconf hive.server2.authentication.kerberos.keytab=hive.keytab \
--principal hive/cdh04.fayson.com@FAYSON.COM --keytab hive.keytab \
--hiveconf hive.server2.thrift.port=10001 \
--hiveconf hive.server2.thrift.bind.host=0.0.0.0 \
--hiveconf hive.server2.enable.doAs=true


(可左右滑动)

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_spark_07

这里在cdh04.fayson.com启动的ThriftServer,使用hive/cdh04.fayson.com@FAYSON.COM账号启动,在下面的JDBC连接时需要该账号。


3.在工程目录下新建KBSample.java文件,内容如下:


package com.cloudera.spark1jdbc;
import com.cloudera.utils.JDBCUtils;
import org.apache.hadoop.conf.Configuration;
import org.apache.hadoop.security.UserGroupInformation;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
/**
* package: com.cloudera.sparkjdbc
* describe: 使用JDBC的方式访问Kerberos环境下Spark1.6 Thrift Server
* creat_user: Fayson
* email: htechinfo@163.com
* creat_date: 2018/6/1
* creat_time: 上午10:21
* 公众号:Hadoop实操
*/
public class KBSample {
private static String JDBC_DRIVER = "org.apache.hive.jdbc.HiveDriver";
private static String CONNECTION_URL ="jdbc:hive2://cdh04.fayson.com:10001/;principal=hive/cdh04.fayson.com@FAYSON.COM";
static {
try {
Class.forName(JDBC_DRIVER);
} catch (ClassNotFoundException e) {
e.printStackTrace();
}
}
public static void main(String[] args) throws{
System.out.println("通过JDBC连接Kerberos环境下的Spark1.6 Thrift Server");
//登录Kerberos账号
System.setProperty("java.security.krb5.conf", "/Users/fayson/Documents/develop/kerberos/krb5.conf");
Configuration configuration = new Configuration();
configuration.set("hadoop.security.authentication" , "Kerberos" );
UserGroupInformation. setConfiguration(configuration);
UserGroupInformation.loginUserFromKeytab("fayson@FAYSON.COM", "/Users/fayson/Documents/develop/kerberos/fayson.keytab");
System.out.println(UserGroupInformation.getLoginUser());
Connection connection = null;
ResultSet rs = null;
PreparedStatement ps = null;
try {
connection = DriverManager.getConnection(CONNECTION_URL);
ps = connection.prepareStatement("select * from test");
rs = ps.executeQuery();
while (rs.next()) {
System.out.println(rs.getInt(1) + "----" + rs.getString(2));
}
} catch (Exception e) {
e.printStackTrace();
} finally {
JDBCUtils.disconnect(connection, rs, ps);
}
}
}


(可左右滑动)

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_spark_08


4.示例代码运行

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_hive_09

成功的从Hive库中取出test表的数据。


5.查看Yarn上的作业

如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_spark_10

Spark执行的SQL语句​


如何使用java连接Kerberos和非kerberos和kerberos的Spark1.6 ThriftServer_java_11



5.总结



  • 通过JDBC访问Spark ThriftServer使用Hive JDBC驱动即可,不需要做额外的配置
  • 在启用非Kerberos环境下的Spark ThriftServer服务时需要指定用户为hive,否则在执行查询的时候会出现访问HDFS文件权限问题
  • 访问Kerberos环境下的Spark ThriftServer需要在运行环境中增加Kerberos的环境


举报

相关推荐

0 条评论