Installing Apache Ranger
Also available as:
PDF

Additional Ranger Plugin Steps for Kerberos: Hive

How to enable the Ranger Hive plugin on a Kerberos cluster.

This procedure assumes that you have already completed “Customize Services: Plugins”.

  1. Create the system (OS) user rangerhivelookup. Make sure this user is synced to Ranger Admin (under Settings>Users/Groups tab in the Ranger Admin UI).
  2. Create a Kerberos principal for rangerhivelookup: kadmin.local -q 'addprinc -pw rangerhivelookup rangerhivelookup@example.com.
  3. Navigate to the Hive service.
  4. Click the Config tab and navigate to advanced ranger-hive-plugin-properties.
  5. Update the following properties with the values listed in the table below.
    Table 1. Hive Plugin Properties
    Configuration Property Name Value
    Ranger service config user rangerhivelookup@example.com
    Ranger service config password rangerhivelookup
    common.name.for.certificate blank
  6. After updating these properties, click Save and then restart the Hive service.