Create a Cloudera Impala connection

To access your data stored on an Cloudera Impala database, you will need to know the server and database name that you want to connect to, and you must have access credentials. Once you have created a connection to an Cloudera Impala database, you can select data from the available tables and then load that data into your app or document.

SSO

In Qlik Sense, you connect to an Cloudera Impala database through the Add data dialog or the Data load editor.

In QlikView you connect to an Cloudera Impala database through the Edit Script dialog.

Setting up the database properties

Property Description Required
Host name Host name to identify the location of the Cloudera Impala database. Yes
Port Server port for the Cloudera Impala database. Yes
Database The name of the Cloudera Impala database. Yes

Authenticating the driver

Note:

The ODBC Connector Package's Cloudera Impala Connector does not support single sign-on (SSO) in:

  • QlikView
  • Qlik Sense Desktop
  • Qlik Cloud

Qlik Sense: Cloudera Impala authentication properties

Property Description Required
Mechanism

Select Single Sign-On, User Name and Password, or allow connection with No Authentication.

Warning: The single sign-on (SSO) functionality in the Cloudera Impala Connector is a Beta version, and is only supported in Qlik Sense Enterprise on Windows.
Note: When a connection is created or edited with Single Sign-On selected, the connection uses the credentials of the user who is currently logged into Qlik Sense.

If a user ID is specified for the Delegation UID property, then the connection is tested with the user ID specified in the Delegation UID property and the password for the Delegation UID. Any time the connection properties are changed, the password for the Delegation UID must be reentered to test or save the changes to the connection.

Yes
Kerberos FQDN The fully qualified domain name (FQDN) of the Kerberos authentication server. Yes, when Single Sign-On is selected.
Kerberos Realm The name of the Kerberos realm, which is the set of managed nodes that share the same Kerberos database. Yes, when Single Sign-On is selected.
KrbServiceName The Kerberos service principal name (SPN) of the Impala server. Yes, when Single Sign-On is selected.
SSO user name format

Select the format of the single sign-on (SSO) user name that is used when the name is passed to the Cloudera Impala server. This setting applies to the SSO user and the Delegation UID.

QlikID (domain\username)

UPN (username@domain.com)

username

Yes, when Single Sign-On is selected.
SSO user name casing

Select the case sensitivity for the single sign-on (SSO) user name that is used when the name is passed to the Cloudera Impala server. This setting applies to the SSO user and the Delegation UID.

Case sensitive

Upper case

Lower case

Yes, when Single Sign-On is selected.
Delegation UID

The user ID to use for scheduled, automatic reloads. If a Delegation UID is specified, user password is required each time a connection is created or edited, to verify the access to delegation credentials. The ID must be entered in the format domain\username.

Note: Manual reloads always use the ID of the user who is logged into Qlik Sense, not the Delegation UID.

No, but the ID can be provided when Single Sign-On is selected.

Note: Because scheduled reloads are performed under a system account instead of a real user, Single Sign-On may not be necessary. The scheduled reloads can be performed using predefined NTLM authentication.
User name User name for the Cloudera Impala connection. Yes, when Single Sign-On is not selected.
Password

Password for the Cloudera Impala connection.

Note: When Single Sign-On is selected, the password is for the user identified with the Delegation UID property. If a user is not specified in the Delegation UID property, then the Password property must be left blank for single sign-on (SSO).
Yes, when Single Sign-On is not selected.
Canonicalize Principal FQDN Specifies that the Kerberos layer must convert the host FQDN in the server's service principal name (SPN) to canonical form. No
Transport Buffer Size The number of bytes to reserve in memory for buffering unencrypted data from the network. Default = 1000. In most cases, the default value is optimal. Yes
Use Simple Authentication and Security Layer Use Simple Authentication and Security Layer (SASL) to handle authentication. This property can be used only when Sign-On or User Name and Password mechanism is selected. No
Name Name of the Cloudera Impala connection. The default name will be used if you do not enter a name. Yes

QlikView: Cloudera Impala authentication properties

Property Description
Mechanism Require user name and password, or allow connection without user name and password authentication.
Username User name for the Cloudera Impala connection.
Password Password for the Cloudera Impala connection.
Transport Buffer Size The number of bytes to reserve in memory for buffering unencrypted data from the network. Default = 1000. In most cases, the default value is optimal.
Use Simple Authentication and Security Layer Use Simple Authentication and Security Layer (SASL) to handle authentication. This property can be used only when User Name and Password mechanism is selected.

Setting SSL options

Property Description Required
Enable SSL Require SSL authentication on the connection the Apache Hive server. No
Use System Trust Store Use the SSL certificate located in the standard system location used for storing trusted certificates. This property can be selected only when SSL is enabled. No
Full path of Trusted Certificates The full path to the SSL certificate if it is not stored in the standard system location. This property can be selected only when SSL is enabled. No
Allow Self-signed Server Certificate Accept an SSL certificate from the server that is self-signed and not verified by a trusted authority. This property can be selected only when SSL is enabled. No
Allow Common Name Host Name Mismatch Allow a mismatch between the SSL certificate's common name and the name provided in Host name field. This property can be selected only when SSL is enabled. No
Check Certificate Revocation Cloudera Impala ODBC driver checks for certificate revocation while retrieving a certificate chain from the Trust Store. This check works if the trusted CA supports certificate revocation. No

Miscellaneous properties

Property Description
Query timeout Amount of time before a data load query times out. Can be set from 30 seconds to 65535 seconds. Default = 30 seconds

Using Advanced options

Property Description Required

Name

Name of additional properties.

You can add more than one additional properties.

No
Value

Value of additional properties.

You can add more than one additional properties.

No
Note: When you connect to an Cloudera Impala database with the Data load editor or the Edit Script dialog, Test Connection enables you to test the connection before you attempt to create it.

Did this information help you?

Thanks for letting us know. Is there anything you'd like to tell us about this topic?

Can you tell us why it did not help you and how we can improve it?