I'm trying to configure Hive and Impala to use ldap authentication against AD without SSL. Hive is working. But I'm stuck with Impala. Here are details:    Lines I added to hive-site.xml:   <property> <name>hive.server2.authentication</name> <value>LDAP</value> </property> <property> <name>hive.server2.authentication.ldap.url</name> <value>ldap://sfad.sf.vit-cdc.com:389</value> </property> <property> <name>hive.server2.authentication.ldap.Domain</name> <value>sf.vit-cdc.com</value> </property>   In Impala configuration, I checked Enable LDAP Authentication and set LDAP URI to ldap://sfad.sf.vit-cdc.com:389. In Impala Daemon Command Line Argument Advanced Configuration Snippet field, I added --ldap_bind_pattern="sAMAccountName=#UID,CN=Users,DC=sf,DC=vit-cdc,DC=com"   I used LDAP Admin to make sure there's an attibute sAMAccountName=ylu in object CN=Ying Lu,CN=Users,DC=sf,DC=vit-cdc,DC=com   Here's what I got in my impalad log:   I0729 10:48:10.298579 19737 impalad-main.cc:87] Impala has started. I0729 10:48:35.219799 20083 authentication.cc:188] Trying simple LDAP bind for: "sAMAccountName=ylu,CN=Users,DC=sf,DC=vit-cdc,DC=com" W0729 10:48:35.233507 20083 authentication.cc:194] LDAP bind failed: Invalid credentials E0729 10:48:35.233678 20083 authentication.cc:117] SASL message: Password verification failed I0729 10:48:35.241914 20083 thrift-util.cc:105] TThreadPoolServer: TServerTransport died on accept: SASL(-13): user not found: Password verification failed   Any help will be much appreciated! ... View more

I have configured my CDH to use Kerberos to authenticate, and use sentry to do table level authentication. Impala seem connecting fine using ODBC sample DSN. But when I was trying to connect to hive. I got following message in my hiveserver2 log. Does anyone know what's going on here? Not much I can google out.   2014-07-28 13:35:17,355 INFO org.apache.hive.service.cli.thrift.ThriftCLIService: ThriftBinaryCLIService listening on 0.0.0.0/0.0.0.0:10000 2014-07-28 13:35:32,556 INFO org.apache.hive.service.cli.thrift.ThriftCLIService: Client protocol version: HIVE_CLI_SERVICE_PROTOCOL_V1 2014-07-28 13:35:32,846 WARN org.apache.hadoop.hive.conf.HiveConf: DEPRECATED: Configuration property hive.metastore.local no longer has any effect. Make sure to provide a valid value for hive.metastore.uris if you are connecting to a remote metastore. 2014-07-28 13:35:33,288 WARN org.apache.hadoop.hive.conf.HiveConf: DEPRECATED: Configuration property hive.metastore.local no longer has any effect. Make sure to provide a valid value for hive.metastore.uris if you are connecting to a remote metastore. 2014-07-28 13:35:33,304 ERROR org.apache.thrift.ProcessFunction: Internal error processing OpenSession java.lang.NoSuchFieldError: HIVE_SERVER2_AUTHZ_EXTERNAL_EXEC at org.apache.sentry.binding.hive.HiveAuthzBindingSessionHook.<clinit>(HiveAuthzBindingSessionHook.java:35) at java.lang.Class.forName0(Native Method) at java.lang.Class.forName(Class.java:270) at org.apache.hadoop.hive.ql.hooks.HookUtils.getHooks(HookUtils.java:59) at org.apache.hive.service.cli.session.SessionManager.executeSessionHooks(SessionManager.java:210) at org.apache.hive.service.cli.session.SessionManager.openSession(SessionManager.java:133) at org.apache.hive.service.cli.CLIService.openSession(CLIService.java:118) at org.apache.hive.service.cli.thrift.ThriftCLIService.getSessionHandle(ThriftCLIService.java:263) at org.apache.hive.service.cli.thrift.ThriftCLIService.OpenSession(ThriftCLIService.java:207) at org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession.getResult(TCLIService.java:1313) at org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession.getResult(TCLIService.java:1298) at org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39) at org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39) at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingProcessor.process(HadoopThriftAuthBridge20S.java:608) at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:244) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745) ... View more