jdbc:impala://XXXXXXX:21050/impala?AuthMech=1;KrbRealm=AAA.BBB.CC;KrbHostFQDN=my-proxy;KrbServiceName=impala;LogLevel=6;LogPath=/tmp/

<security>
      <security-domain>security-impala</security-domain>
</security>

<security-domain name="security-impala" cache-type="default">

   <authentication>

     <login-module code="org.jboss.security.negotiation.KerberosLoginModule" flag="required" module="org.jboss.security.negotiation">

       <module-option name="useKeyTab" value="true"/>
       <module-option name="keyTab" value="/path/to/my.keytab"/>
       <module-option name="principal" value="principal@REALM.COM"/>
       <module-option name="useTicketCache" value="false"/>
       <module-option name="debug" value="true"/>
       <module-option name="refreshKrb5Config" value="true"/>
       <module-option name="isInitiator" value="true"/>
       <module-option name="doNotPrompt" value="true"/>

     </login-module>

   </authentication>

</security-domain>

UserGroupInformation ugi =
UserGroupInformation.loginUserFromKeytabAndReturnUGI(user, keytabfile);
Connection con = (Connection) ugi.doAs(new
PrivilegedExceptionAction<Object>() {
      public Object run() {
        Connection tcon = null;
        try {
          tcon = DriverManager.getConnection(connectionURL, user,
passwd);
        } catch (SQLException e) {}
        return tcon;
      }
});