https://community.cloudera.com/t5/Support-Questions/hiveserver2-error/m-p/115564#M78358 <P>@<A href="https://community.hortonworks.com/users/968/chrsvarma.html"><IMG src="https://ip1.i.lithium.com/ad9e25a6cf6be71d84a52d4068390a0ad437128e/68747470733a2f2f636f6d6d756e6974792e686f72746f6e776f726b732e636f6d2f75736572732f3936382f70686f746f2f766965772e68746d6c3f74696d653d3134353334373438303138373126733d3234" alt="avatar image" style="width: 24px;" /></A><A href="https://community.hortonworks.com/users/968/chrsvarma.html">Raja Sekhar Chintalapati</A></P><P>Of course if you setup a KDC the keytabs are valid but you need to grab a valid one to proceed! Get the list of keytabs</P><P>List all valid keytabs</P><PRE>$ ls /etc/security/keytabs </PRE><P>List valid principals for this keytab</P><PRE>$ klist -kt /etc/security/keytabs/hive.service.keytab Keytab name: FILE:/etc/security/keytabs/hive.service.keytab KVNO Timestamp Principal ---- ----------------- -------------------------------------------------------- 1 02/02/17 23:00:12 hive/Ambari-Host_name@YOUR_REALM.COM 1 02/02/17 23:00:12 hive/Ambari-Host_name@YOUR_REALM.COM </PRE><P>Grab a valid ticket</P><PRE>$ kinit -kt /etc/security/keytabs/hive.service.keytab hive/Ambari-Host_name@YOUR_REALM.COM </PRE><P>Check validity </P><PRE>$ klist Ticket cache: FILE:/tmp/krb5cc_504 Default principal: hive/Ambari-Host_name@YOUR_REALM.COM Valid starting Expires Service principal 02/10/17 01:32:45 02/11/17 01:32:45 krbtgt/YOUR_REALM.COM@YOUR_REALM.COM renew until 02/10/17 01:32:45 </PRE><P>Grab a valid ticket </P><PRE>$ kinit -kt /etc/security/keytabs/hive.service.keytab hive/Ambari-Host_name@YOUR_REALM.COM</PRE><P></P><P>This should have been the correct connect string if you had a valid ticket</P><PRE>beeline -u jdbc:hive2://hiveServer2_hostname:10000;principal=hive/Keytab@PRINCIPAL</PRE><P>With the above you should successfully log on and execute your HQL</P> Tue, 21 Feb 2017 11:03:40 GMT Shelton 2017-02-21T11:03:40Z