Hive
![[Important]](../common/images/admon/important.png) | Important |
|---|---|
You should not use the Hive CLI after enabling the Ranger Hive plugin. The Hive CLI is not supported in HDP-2.2.0 and higher versions, and may break the install or lead to other unpredictable behavior. Instead, you should use the HiveServer2 Beeline CLI. |
To enable the Ranger HBase plugin on a Kerberos-enabled cluster, perform the steps described below.
Create the system (OS) user
rangerhivelookup. Make sure this user is synced to Ranger Admin (under users/groups tab in the Ranger Admin UI).Create a Kerberos principal for
rangerhivelookupby entering the following command:kadmin.local -q 'addprinc -pw rangerhivelookup rangerhivelookup@example.com
Navigate to the Hive service.
Click on the Config tab and navigate to advanced ranger-hive-plugin-properties.
Update the following properties with the values listed in the table below.
Table 6.2. Hive Plugin Properties
Configuration Property Name Value Ranger repository config user rangerhivelookup@example.com Ranger repository config password rangerhivelookup common.name.for.certificate blank After updating these properties, click Save and then restart the Hive service.