Configure HiveServer2 to use PAM Authentication

You can configure HiveServer2 to use Pluggable Access Modules (PAM). The configuration requirements for PAM differ based on the version of Hive that you have installed.
Hive Version Default Configuration Configuration Requirement
1901 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1808 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1901 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1808 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.
1803 MapR-SASL and PAM are enabled by default on a secure cluster. No configuration is required.

Configure HiveServer2 to explicitly use PAM Authentication

  1. In the hive-site.xml on the HiveServer2 node, set the hive.server2.authentication property to PAM:
    <property>
      <name>hive.server2.authentication</name>
      <value>PAM</value>
    </property>
  2. Restart HiveServer2 to apply these changes:
    maprcli node services -name hs2 -action restart -nodes <comma-separated list of nodes>