Kerberos support for IMPORT/EXPORT FROM/TO JDBC (incl. Hadoop JDBC Driver)

Details

Detail name Value
Changelog Number 770
Type New Feature
Status Resolved
Fix Versions EXASOL 6.0.0
Resolution Date 2017-03-16

IMPORT/EXPORT FROM/TO JDBC now supports Kerberos authentication. In order to use it, the Kerberos configuration and keytab data must be provided in the IDENTIFIED BY field. Please see the details below.

The CONNECTION data for Kerberos authentication is specified as follows.

  • The AT field contains the JDBC URL.
  • The USER field contains the Kerberos principal.
  • The IDENTIFIED BY field is composed of three semicolon-separated items:
  1. An internally used key, "ExaAuthType=Kerberos" (case sensitive!), which informs EXASolution that the connection is a Kerberos connection.
  2. A base64-encoded Kerberos configuration file for the connection (e.g., krb5.conf)
  3. A base64-encoded Kerberos keytab file containing the credentials for the principal (e.g., <principal>.keytab)

Examples:

IMPORT INTO table1 FROM JDBC AT '<JDBC_URL>' USER '<kerberos_principal>' IDENTIFIED BY 'ExaAuthType=Kerberos;<base64_krb_conf>;<base64_keytab>' TABLE table2;

CREATE CONNECTION krb_conn TO '<JDBC_URL>' USER '<kerberos_principal>' IDENTIFIED BY 'ExaAuthType=Kerberos;<base64_krb_conf>;<base64_keytab>';

EXPORT table1 INTO JDBC AT krb_conn TABLE table2;