Table of Contents

Search

  1. Preface
  2. Introduction to Dynamic Data Masking Administration
  3. Authentication
  4. Security
  5. Connection Management
  6. JDBC Client Configuration
  7. ODBC Client Configuration
  8. Access Control
  9. Logs
  10. High Availability
  11. Server Control
  12. Performance Tuning
  13. Troubleshooting
  14. Appendix A: Database Keywords

Administrator Guide

Administrator Guide

Hive Connection Parameters

Hive Connection Parameters

Define the following connection parameters for a Hive database:
DDM Database Name
Name for the database that appears in the Management Console tree.
Server Address
Server host name or TCP/IP address for the Hive database.
Verify that there is no firewall that prohibits the Dynamic Data Masking Server from connecting to the database server and port number.
Server Port
TCP/IP listener port for the Hive database.
Hive Database Name
Database name for the Hive database.
Driver Classpath
Classpath of the Hive database driver files on the Dynamic Data Masking Server. Use semicolons to separate multiple classpaths.
You can use an asterisk (*) to indicate all the jar files in a directory. Dynamic Data Masking ignores files in the directory that are not jar files. For example, you might enter the following location for Windows:
C:\JDBC_Drivers\Hive\hive\*;C:\JDBC_Drivers\Hive\hadoop\*
Keystore
Select custom if you have configured a custom key store. Select default if you want to use the default key store pre-configured for use with Dynamic Data Masking.
DBA Username
Optional user name for the database user account to log in to the Hive database. The database user must be a privileged user that has SELECT access to all the tables that the client user has SELECT access to. This parameter is valid for the default key store.
Leave this parameter blank if the Hive database has Kerberos authentication enabled.
DBA Password
Optional password for the database user. This parameter is valid for the default key store.
Leave this parameter blank if the Hive database has Kerberos authentication enabled.
Key Store Name
Name of the custom key store, defined in the
ddm.security
file. This parameter is valid for custom key stores.
Alias
Alias name for the custom key store. For CyberArk accounts, the alias name was defined during creation of the CyberArk account. This parameter is valid for custom key stores.
Connection String (URL)
JDBC connection URL based on the driver.
If the Hive database has Kerberos authentication enabled, the URL properties
auth
and
kerberosAuthType
are mandatory.
For example: jdbc:hive2://hiveserver:10000/default;principal=hive/hiveserver@realm.com;
auth=kerberos;kerberosAuthType=fromSubject
Database Server Principal
When you connect to a Hive database with Kerberos authentication enabled, specify the server principal of Hive, even though it is included in the JDBC URL. Otherwise, leave this parameter blank.

0 COMMENTS

We’d like to hear from you!