Configure HiveServer2 to use MapR-SASL Authentication

MapR-SASL is available starting with the 1504 release of Hive 0.13 and Hive 1.0 and it is the default authentication method when the cluster is secure.

Configuring Hive Metastore to use MapR-SASL

When the cluster is secure, the following default settings in /opt/mapr/conf/env.sh configure the node to use MapR-SASL:

  • MAPR_HIVE_LOGIN _OPTS="-Dhadoop.login=maprsasl"
  • MAPR_HIVE_SERVER_LOGIN_OPTS="-Dhadoop.login=maprsasl_keytab"

Configuring Hive Metastore Clients to use MapR-SASL when authenticating with Hive Metastore

When the cluster is secure, the following default settings in /opt/mapr/conf/env.sh configure the node to use MapR-SASL

  • MAPR_HIVE_LOGIN _OPTS="-Dhadoop.login=maprsasl"

Hive Metastore clients must provide a valid MapR ticket to connect to the Hive Metastore. See Connecting to Hive for details.