question Enable LDAP Authentication on Hive caused HUE to not load a databases in Archives of Support Questions (Read Only)

Enable LDAP Authentication on Hive caused HUE to not load a databases

jirapong — Tue, 21 Apr 2026 13:44:34 GMT

Hi,

I'm using CDH 5.12 with 16 nodes. Our setup is LDAP for HUE via Sentry. Everything works as expected. We can create user on LDAP and grant a permisson with Sentry. However, I'm also want to apply same login to the beeline. But when "Enable LDAP Authentication" on Hive Configuration, It caused error on HUE with message "Bad status: 3 (Error validating the login)" and no databases list loading.

Thank you very much for any clue or help.

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

GeKas — Wed, 28 Feb 2018 09:25:26 GMT

I suppose you have also configured Kerberos on your cluster.

From Cloudera Manager, go to HUE configuration.

Search the "Hue Server Advanced Configuration Snippet (Safety Valve) for hive-site.xml" and add the following property.

Name: hive.server2.authentication

Value: kerberos

or if you use xml view:

<property>
  <name>hive.server2.authentication</name>
  <value>kerberos</value>
  <final>true</final>
</property>

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

GeKas — Wed, 28 Feb 2018 09:39:13 GMT

Just to give some more info.

When you enable LDAP authentication for Hive, HUE gets confused and tries also to connect to Hive via LDAP, instead of Kerberos authentication. By setting this configuration, you force HUE to go with Kerberos authentication while your Hive can still accept both.

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

GeKas — Fri, 02 Mar 2018 09:45:45 GMT

Have you tried this configuration?

Re: Enable LDAP Authentication on Hive caused HUE to not load a databases

jirapong — Mon, 05 Mar 2018 09:04:23 GMT

Yes. I've end-up using impersonate user following this article http://gethue.com/ldap-or-pam-pass-through-authentication-with-hive-or-impala/

and plus

<property>
<name>hadoop.proxyuser.hue_hive.groups</name>
<value>*</value>
</property>

on core-site.xml by this answer http://community.cloudera.com/t5/Web-UI-Hue-Beeswax/Failed-to-validate-proxy-privilege-of-hue-hive-for-administrator/m-p/49742