SPNEGO setup for WebHCat
How to set up SPNEGO for WebHCat.
To set up secure WebHCat, set the following properties in the
/etc/hcatalog/conf/webhcat-site.xml
file:
</property>
<name>templeton.kerberos.principal</name>
<value>HTTP/host1234.example.com@EXAMPLE.COM</value>
<description/>
<property>
The templeton.kerberos.principal
property must use the host name of
the WebHCat Server.
<property>
<name>templeton.kerberos.keytab</name>
<value>/etc/security/keytabs/spnego.service.keytab</value>
<description/>
</property>
<property>
<name>templeton.kerberos.secret</name>
<value>secret</value>
<description/>
</property>
<property>
<name>templeton.hive.properties</name>
<value>hive.metastore.local=false,hive.metastore.uris=thrift://host1234.example.com:9083,
hive.metastore.sasl.enabled=true,hive.metastore.execute.setugi=true,
hive.exec.mode.local.auto=false,
hive.metastore.kerberos.principal=hive/_HOST@EXAMPLE.COM</value>
<description>Properties to set when running hive.</description>
</property>
Be sure to set the templeton.hive.properties
property with the host
name for your Thrift server.