Cloudera Docs

Configuring custom Kerberos principal for Hive and Hive-on-Tez

Use the steps given here to configure a custom Kerberos principal for Hive and Hive-on-Tez.

  1. In Cloudera Manager, go to Clusters > HIVE and click Actions > Stop to stop the Hive services.
  2. In Cloudera Manager, go to Clusters > HIVE > Configuration and search for “Kerberos”.
  3. Enter the custom Kerberos principal, hivefoo, in the Kerberos Principal field.
  4. The /hiveserver2 node is created when the HiveServer2 is launched for the first time. All instance nodes are created under /hiveserver2. When the kerberos principal name is changed, the parent node must be deleted so that a new parent node can be automatically recreated with the new ACL. 
    kinit <zookeeper_principal>

zookeeper-client
delete /hiveserver2
  5. Use the following commands to set up the HDFS user home directory: 
    kinit hdfs
hadoop fs -mkdir /user/hivefoo
hadoop fs -chown hivefoo:hive /user/hivefoo
  6. In Cloudera Manager, go to Clusters > HIVE and click Actions > Start to start Hive services.