hive2.3.2配置(带kerberos)

hive-env.sh

export HADOOP_HEAPSIZE=2048
export HADOOP_CLIENT_OPTS="-Xmx2g -Xms2g -Djava.net.preferIPv4Stack=true $HADOOP_CLIENT_OPTS"
HADOOP_HOME=/export/hadoop
HADOOP_CONF_DIR=/export/common/hadoop/conf
export HIVE_CONF_DIR=/export/common/hive/conf
export HIVE_HOME=/export/hive

hive-site.xml

<configuration>

  <property>
    <name>mapreduce.input.fileinputformat.input.dir.recursivename>
    <value>truevalue>
  property>

  <property>
    <name>hive.mapred.supports.subdirectoriesname>
    <value>truevalue>
  property>

<property>
    <name>hive.metastore.warehouse.dirname>
    <value>/user/hive/warehousevalue>
  property>

  <property>
    <name>hive.support.sql11.reserved.keywordsname>
    <value>falsevalue>
  property>

  <property>
    <name>javax.jdo.option.ConnectionURLname>
    <value>jdbc:mysql://192.168.56.70:3306/hive?characterEncoding=utf8&createDatabaseIfNotExist=truevalue>
  property>

  <property>
    <name>javax.jdo.option.ConnectionDriverNamename>
    <value>com.mysql.jdbc.Drivervalue>
  property>

  <property>
    <name>javax.jdo.option.ConnectionUserNamename>
    <value>hivevalue>
  property>

  <property>
    <name>javax.jdo.option.ConnectionPasswordname>
    <value>hivevalue>
  property>

  <property>
    <name>hive.security.authorization.task.factoryname>
    <value>org.apache.hadoop.hive.ql.parse.authorization.HiveAuthorizationTaskFactoryImplvalue>
  property>

  <property>
    <name>hive.server2.logging.operation.enabledname>
    <value>truevalue>
  property>

  <property>
    <name>hive.metastore.schema.verificationname>
    <value>falsevalue>
  property>

  <property>
    <name>datanucleus.schema.autoCreateTablesname>
    <value>truevalue>
  property>
<property>
<name>hive.metastore.urisname>
<value>thrift://192.168.56.71:9083,thrift://192.168.56.72:9083value>
property>

<property>
    <name>hive.server2.authenticationname>
    <value>KERBEROSvalue>
property>

<property>
    <name>hive.server2.authentication.kerberos.principalname>
    <value>hive/[email protected]value>
property>

<property>
    <name>hive.server2.authentication.kerberos.keytabname>
    <value>/export/kerberos/hive.keytabvalue>
property>
 
<property>
    <name>hive.server2.thrift.sasl.qopname>
    <value>auth-confvalue>
    <description>Sasl QOP value; one of 'auth', 'auth-int' and 'auth-conf'description>
property>
<property>
    <name>hive.metastore.sasl.enabledname>
     <value>truevalue>
property>

<property>
    <name>hive.metastore.kerberos.keytab.filename>
    <value>/export/common/hive/conf/hive.keytabvalue>
property>

<property>
    <name>hive.metastore.kerberos.principalname>
    <value>hive/[email protected]value>
property>

 

<property>

<name>hive.server2.support.dynamic.service.discoveryname>

<value>truevalue>

property>


<property>

<name>hive.server2.zookeeper.namespacename>

<value>hiveserver2_zkvalue>

property>


<property>

<name>hive.zookeeper.quorumname>

<value>hadoop01:2181,hadoop02:2181,hadoop03:2181value>

property>


<property>

<name>hive.zookeeper.client.portname>

<value>2181value>

property>


<property>
    <name>hive.security.authorization.managername>
    <value>org.apache.hadoop.hive.ql.security.authorization.DefaultHiveAuthorizationProvidervalue>
property>
<property>
    <name>hive.metastore.authorization.storage.checksname>
    <value>truevalue>
    <description>
      Should the metastore do authorization checks against the underlying storage (usually hdfs)
      for operations like drop-partition (disallow the drop-partition if the user in
      question doesn't have permissions to delete the corresponding directory
      on the storage).
    description>
property>
<property> 
    <name>hive.security.authorization.enabledname> 
    <value>truevalue> 
    <description>enable or disable the hive clientauthorizationdescription>
property>
<property> 
    <name>hive.security.authorization.createtable.owner.grantsname> 
    <value>ALLvalue> 
    <description>the privileges automatically granted to the ownerwhenever a table gets created. An example like "select,drop" willgrant select and drop privilege to the owner of the tabledescription>
property>

configuration>