DocsHortonworks Data Platform

 

 2. Hive

[Important]Important

You should not use the Hive CLI after enabling the Ranger Hive plugin. The Hive CLI is not supported in HDP-2.2.0 and higher versions, and may break the install or lead to other unpredictable behavior. Instead, you should use the HiveServer2 Beeline CLI.

To enable the Ranger HBase plugin on a Kerberos-enabled cluster, perform the steps described below.

  1. Create the system (OS) user hiveuser. Make sure this user is synced to Ranger Admin (under users/groups tab in the Ranger Admin UI).

  2. Create a Kerberos principal for hiveuser by entering the following command:

    • kadmin.local -q 'addprinc -pw hiveuser hiveuser@example.com

  3. Navigate to the Hive service.

  4. Click on the Config tab and navigate to advanced ranger-hive-plugin-properties.

  5. Update the following properties with the values listed in the table below.

     

    Table 5.2. Hive Plugin Properties

    Configuration Property NameValue
    Ranger repository config userhiveuser@example.com
    Ranger repository config passwordhiveuser
    common.name.for.certificateblank


  6. After updating these properties, click Save and then restart the Hive service.

Legal notices