Reply
Highlighted
New Contributor
Posts: 5
Registered: ‎09-12-2017
Accepted Solution

Enable LDAP Authentication on Hive caused HUE to not load a databases

Hi,

 

   I'm using CDH 5.12 with 16 nodes. Our setup is LDAP for HUE via Sentry. Everything works as expected. We can create user on LDAP and grant a permisson with Sentry. However, I'm also want to apply same login to the beeline. But when "Enable LDAP Authentication" on Hive Configuration, It caused error on HUE with message "Bad status: 3 (Error validating the login)" and no databases list loading.

 

   Thank you very much for any clue or help.

Expert Contributor
Posts: 127
Registered: ‎01-08-2018

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

I suppose you have also configured Kerberos on your cluster.

From Cloudera Manager, go to HUE configuration.

Search the "Hue Server Advanced Configuration Snippet (Safety Valve) for hive-site.xml" and add the following property.

Name: hive.server2.authentication

Value: kerberos

 

or if you use xml view:

<property>
  <name>hive.server2.authentication</name>
  <value>kerberos</value>
<final>true</final> </property>
Expert Contributor
Posts: 127
Registered: ‎01-08-2018

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

Just to give some more info.

When you enable LDAP authentication for Hive, HUE gets confused and tries also to connect to Hive via LDAP, instead of Kerberos authentication. By setting this configuration, you force HUE to go with Kerberos authentication while your Hive can still accept both.

Expert Contributor
Posts: 127
Registered: ‎01-08-2018

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

Have you tried this configuration?

New Contributor
Posts: 5
Registered: ‎09-12-2017

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

Yes. I've end-up using impersonate user following this article http://gethue.com/ldap-or-pam-pass-through-authentication-with-hive-or-impala/ 

 

and plus

 

<property>
<name>hadoop.proxyuser.hue_hive.groups</name>
<value>*</value>
</property>

 

on core-site.xml by this answer http://community.cloudera.com/t5/Web-UI-Hue-Beeswax/Failed-to-validate-proxy-privilege-of-hue-hive-f...

Announcements