Configure HiveServer2 to use PAM Authentication

About this task

You can configure HiveServer2 to use Pluggable Access Modules (PAM). The configuration requirements for PAM differ based on the version of Hive that you have installed.
Hive Version Default Configuration Configuration Requirement
Hive 2.3 1904 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1901 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1808 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
Hive 2.1 1904 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1901 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1808 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1803 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.

Configure HiveServer2 to explicitly use PAM Authentication

Procedure

  1. In the hive-site.xml on each HiveServer2 node, set the hive.server2.authentication property to PAM: 
    <property>
  <name>hive.server2.authentication</name>
  <value>PAM</value>
</property>
  2. Restart HiveServer2 to apply these changes: 
    maprcli node services -name hs2 -action restart -nodes <comma-separated list of nodes>