Kerberos

1. In the Big Data Tools window, click and select Kafka. Or, if you want to edit an existing connection, select it and click .

2. Open the Kerberos settings: In the Configuration source, select Custom, and, under Authentication, select SASL | Kerberos.

3. If you want to use the Kerberos ticket cache created by the kinit tool, select Use kinit cache.

   Otherwise, clear the Use kinit cache checkbox and provide authentication data:

   • In the Principal box, enter your Kerberos principal, such as john@EXAMPLE.ORG.

   • In the Keytab box, specify a path to the keytab file.

4. Click IDE Kerberos settings. In the window that opens, in the Krb5 config field, specify your krb5.conf or krb5.ini file or keep the default one.

   note

   The path to a krb5.conf file is a global setting. It applies to all other connections that use Kerberos in your IDE. You can also access global Kerberos settings in Settings | Appearance & Behavior | System Settings | Kerberos Authentication.

Alternatively, you can set up Kerberos connection using configuration properties. Switch to Properties in Configuration source and add the needed properties, for example:

sasl.kerberos.service.name=kafka
security.protocol=SASL_PLAINTEXT
sasl.mechanism=GSSAPI
sasl.jaas.config=com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="/etc/security/keytabs/john.keytab" principal="john@EXAMPLE.COM";

1. In the Big Data Tools window, click and select HDFS. Or, if you want to edit an existing connection, select it and click .

2. Open the Kerberos settings: In the Configuration source, select Custom, and, under Authentication, select Kerberos.

3. If you want to use the Kerberos ticket cache created by the kinit tool, select Use kinit cache.

   Otherwise, in the Authentication by list, select the authentication method:

   • Keytab: enter your Kerberos principal, such as john@EXAMPLE.ORG, and a path to the keytab file.

   • Password: enter your Kerberos principal, such as john@EXAMPLE.ORG, and the principal password.

   • JAAS config: specify the path to the JAAS Login Configuration File. DataGrip detects JAAS entries in the file, and you can then select the one you want to use for authentication in the JAAS entry list. Alternatively, click Generate JAAS entry to generate a new JAAS entry and add it to the file.

     note

     The path to a JAAS Login Configuration File is a global setting. It applies to all HDFS connections that use Kerberos in your IDE.

4. Click IDE Kerberos settings. In the window that opens, in the Krb5 config field, specify your krb5.conf or krb5.ini file or keep the default one.

   note

   The path to a krb5.conf file is a global setting. It applies to all other connections that use Kerberos in your IDE. You can also access global Kerberos settings in Settings | Appearance & Behavior | System Settings | Kerberos Authentication.

1. In the Big Data Tools window, click and select Hive Metastore. Or, if you want to edit an existing connection, select it and click .

2. Open the Kerberos settings: In the Configuration source, select Custom, and, under Authentication, select Kerberos.

3. If you want to use the Kerberos ticket cache created by the kinit tool, select Use kinit cache.

   Otherwise, clear the Use kinit cache checkbox and provide authentication data:

   • In the Principal box, enter your Kerberos principal, such as john@EXAMPLE.ORG.

   • In the Keytab box, specify a path to the keytab file.

4. Click IDE Kerberos settings. In the window that opens, in the Krb5 config field, specify your krb5.conf or krb5.ini file or keep the default one.

   note

   The path to a krb5.conf file is a global setting. It applies to all other connections that use Kerberos in your IDE. You can also access global Kerberos settings in Settings | Appearance & Behavior | System Settings | Kerberos Authentication.