Designing Hive with credential store

In this recipe, we will be configuring the Hive credential store and using authentication for beeline clients to connect and have access control.

This is supported in Hive beeline clients. The authentication by default is PAM, which is a pluggable authentication module, but Hive can have its own credential store.

Getting ready

Make sure that you have completed the Using MySQL for Hive metastore recipe for this section and that you understand the basic Linux user management.

How to do it...

1. Connect to the edge nodeedge1.cyrus.com and switch to the hadoop user.

2. Edit the hive-site.xml file and add the following lines to it:

   <property>
       <name>hive.server2.enable.doAs</name>
       <value>false</value>
   </property>
   
   <property>
       <name>hive.users.in.admin.role</name>
       <value>root</value>
   </property>
   
   <property>
       <name>hive.security.metastore.authorization.manager</name&gt...