Configure HiveServer2 Web UI to use PAM Authentication

About this task

You can configure HiveServer2 web UI to use Pluggable Access Modules (PAM) authentication. The following Hive properties are added to enable PAM authentication for the HiveServer2 web UI: 
hive.server2.webui.use.pam
Default value: false
Description: If true, the HiveServer2 WebUI will be secured with PAM
hive.server2.webui.pam.authenticator
Default value: org.apache.hive.http.security.PamAuthenticator
Description: Class for PAM authentication

Modifying the hive-site.xml file:

Procedure

Configure the following properties in the hive-site.xml file to enable authentication on each node where HiveServer2 is installed: 
<!-- HS2 web UI PAM -->
<property>
  <name>hive.server2.webui.use.pam</name>
  <value>true</value>
</property>
            
<!-- HS2 web UI SSL -->
<property>
  <name>hive.server2.webui.use.ssl</name>
  <value>true</value>
</property>
            
<property>
  <name>hive.server2.webui.keystore.path</name>
  <value>/opt/mapr/conf/ssl_keystore</value>
</property>
            
<property>
  <name>hive.server2.webui.keystore.password</name>
  <value><ssl-keystore-password></value>
</property>
NOTE
After running /opt/mapr/server/configure.sh -R, all properties needed for HiveServer2 Web UI to use PAM authentication is added automatically to hive-site.xml on the Mapr-SASL secure cluster. Connections to HiveServer2 using ODBC do not support MapR-SASL.