Hive
![[Important]](../common/images/admon/important.png) | Important |
|---|---|
You should not use the Hive CLI after enabling the Ranger Hive plugin. The Hive CLI is not supported in HDP-2.2.0 and higher versions, and may break the install or lead to other unpredictable behavior. Instead, you should use the HiveServer2 Beeline CLI. |
To enable the Ranger Hive plugin, perform the steps described below.
Navigate to the Hive service.
Click on the Config tab.
In the Config tab, navigate to advanced ranger-hive-plugin-properties.
Enter values in the fields listed in the Ranger Hive Settings table shown below.
Make sure to select the Enable Ranger for Hive check box.
When you select this check box, a warning dialog will appear.
Click Apply to save these changes.
Ambari will present a restart indicator. Restart the Hive component.
Enter values in the fields listed in the Ranger Hive Settings table shown below.
Table 4.2. Hive Plugin Configuration Properties
Configuration Property Name Description Default Value Example Value Required? Enable Ranger for Hive Flag used to enable/disable Hive functioanlity for Ranger. FALSE Yes Audit to HDFS Flag used to enable/disable Hive audit logging. If Hive audit logging is turned off, it will not log any access control to HDFS. FALSE Yes Audit to DB Flag to enable/disable database audit logging. If the database audit logging is turned off, it will not log any access control to database. FALSE Yes Policy User for Hive Ranger repository config password Should Hive GRANT/REVOKE uspdate XA policies? Checkbox that provides the ability for the XAAgent to update the policies based on the grant/revoke commands from the Hive client. common.name.
for.certificate
jdbc.driverClassName SSL_KEYSTORE_
FILE_PATH
Java Keystore path where SSL key for the plugin is stored. /etc/hive/conf/ranger-plugin-keystore.jks /etc/hive/conf/ranger-plugin-keystore.jks Yes, if SSL is enabled. SSL_KEYSTORE_
PASSWORD
Password associated with the SSL Keystore. This is only used if SSL is enabled between Policy Admin Tool and Plugin. If SSL is not enabled, leave the default value as is - do not set as EMPTY if SSL not used. None None Yes, if SSL is enabled. SSL_TRUSTSTORE_
FILE_PATH
The Java Keystore path where the trusted certificates are stored for verifying the SSL connection to the Policy Admin Tool. This is used only if SSL is enabled between the Policy Admin Tool ad Plugin. If SSL is not enabled, leave the default value as is - do not set as EMPTY if SSL is not used. /etc/hive/conf/ranger-plugin-truststore.jks /etc/hive/conf/ranger-plugin-truststore.jks Yes, if SSL is enabled. SSL_TRUSTSTORE_
PASSWORD
The password associated with the Truststore file. This is used only if SSL is enabled between the Policy Admin Tool and Plugin. If SSL is not enabled, leave the default value as is - do not set as EMPTY if SSL is not used. None None Yes, if SSL is enabled.