Unable to kill Hive queries from the Hue Job Browser in a Kerberized cluster

On a Kerberized cluster, if YARN does not have Kerberos authentication enabled for HTTP web consoles, then you may not be able to kill Hive queries from the Hue Job Browser, and you may see the following error in the Hue role log runcpserver.log file: "The default static user cannot carry out this operation. (error 403)".

On a Kerberized cluster, YARN must have Kerberos authentication enabled for HTTP web consoles. If authentication is not enabled, then the user or application that is trying to access YARN using a REST API is identified as the default "dr.who" user. The default user does not have permissions to access the YARN UI and kill the running jobs. As an immediate solution, you can kill the job from the Hue query editor or from the YARN CLI using the following command: 
yarn application -kill [***APPLICATION-ID***]

To enable killing jobs and running queries from the Hue Job Browser, enable Kerberos authentication for HTTP web consoles for YARN as follows:

  1. Log in to Cloudera Manager as an Administrator.
  2. Go to Clusters > YARN > Configuration and type enable kerberos in the search box.
  3. Select Enable Kerberos Authentication for HTTP Web-Consoles.
  4. Click Save Changes.
  5. Restart the YARN service.