server private key and the certificate. This is a mandatory parameter if SSL is enabled. • --passwordfile (or -a): This specifies the file name containing the password for the server private key. If unspecified unspecified or an empty string is specified this is interpreted as an empty password (i.e. the private key is not protected by a password). If the file name - is specified then then the password is read from • --dhfile (or -D): This specifies the file name containing the DH key. Alternatively it can contain the number of bits of the DH key to generate. If left empty, RSA is used. • --randfile (or -r): This

server private key and the certificate. This is a mandatory parameter if SSL is enabled. • --passwordfile (or -a): This specifies the file name containing the password for the server private key. If unspecified unspecified or an empty string is specified this is interpreted as an empty password (i.e. the private key is not protected by a password). If the file name - is specified then then the password is read from • --dhfile (or -D): This specifies the file name containing the DH key. Alternatively it can contain the number of bits of the DH key to generate. If left empty, RSA is used. • --randfile (or -r): This

server private key and the certificate. This is a mandatory parameter if SSL is enabled. • --passwordfile (or -a): This specifies the file name containing the password for the server private key. If unspecified unspecified or an empty string is specified this is interpreted as an empty password (i.e. the private key is not protected by a password). If the file name - is specified then then the password is read from • --dhfile (or -D): This specifies the file name containing the DH key. Alternatively it can contain the number of bits of the DH key to generate. If left empty, RSA is used. • --randfile (or -r): This

server private key and the certificate. This is a mandatory parameter if SSL is enabled. • --passwordfile (or -a): This specifies the file name containing the password for the server private key. If unspecified unspecified or an empty string is specified this is interpreted as an empty password (i.e. the private key is not protected by a password). If the file name - is specified then then the password is read from • --dhfile (or -D): This specifies the file name containing the DH key. Alternatively it can contain the number of bits of the DH key to generate. If left empty, RSA is used. • --randfile (or -r): This

server private key and the certificate. This is a mandatory parameter if SSL is enabled. • --passwordfile (or -a): This specifies the file name containing the password for the server private key. If unspecified unspecified or an empty string is specified this is interpreted as an empty password (i.e. the private key is not protected by a password). If the file name - is specified then then the password is read from • --dhfile (or -D): This specifies the file name containing the DH key. Alternatively it can contain the number of bits of the DH key to generate. If left empty, RSA is used. 4 1 Introduction • --randfile

balancing instead of a single unit may increase reliability and availability through redundancy. Key Benefits High concurrency By adding or removing Kyuubi server instances can easily scale up or down defaults.conf, see $KYUUBI_HOME/conf/kyuubi-defaults.conf.template as an example. Authentication Key Default Meaning Type Since kyuubi.authenticati on NONE A comma-separated list of client authentication check. KERBEROS: Kerberos/GSSAPI authentication. CUSTOM: User-defined authentication. seq 1.0.0 Key Default Meaning Type Since JDBC: JDBC query authentication. LDAP: Lightweight Directory Access Protocol

balancing instead of a single unit may increase reliability and availability through redundancy. Key Benefits High concurrency By adding or removing Kyuubi server instances can easily scale up or down # # Details in https://kyuubi.readthedocs.io/en/master/deployment/settings.html Authentication Key Default Meaning Type Since kyuubi.authenticati on NONE A comma-separated list of client authentication The following tree describes the catalog of each option. NOSASL SASL SASL/PLAIN NONE seq 1.0.0 Key Default Meaning Type Since LDAP JDBC CUSTOM SASL/GSSAPI KERBEROS Note that: for SASL authentication

balancing instead of a single unit may increase reliability and availability through redundancy. Key Benefits High concurrency By adding or removing Kyuubi server instances can easily scale up or down defaults.conf, see $KYUUBI_HOME/conf/kyuubi-defaults.conf.template as an example. Authentication Key Default Meaning Type Since kyuubi.authenticati on NONE A comma-separated list of client authentication check. KERBEROS: Kerberos/GSSAPI authentication. CUSTOM: User-defined authentication. seq 1.0.0 Key Default Meaning Type Since JDBC: JDBC query authentication. LDAP: Lightweight Directory Access Protocol

balancing instead of a single unit may increase reliability and availability through redundancy. Key Benefits High concurrency By adding or removing Kyuubi server instances can easily scale up or down defaults.conf, see $KYUUBI_HOME/conf/kyuubi-defaults.conf.template as an example. Authentication Key Default Meaning Type Since kyuubi.authenticati on NONE A comma-separated list of client authentication check. KERBEROS: Kerberos/GSSAPI authentication. CUSTOM: User-defined authentication. seq 1.0.0 Key Default Meaning Type Since JDBC: JDBC query authentication. LDAP: Lightweight Directory Access Protocol