02-25-2018 07:09 AM
I'm using CDH 5.12 with 16 nodes. Our setup is LDAP for HUE via Sentry. Everything works as expected. We can create user on LDAP and grant a permisson with Sentry. However, I'm also want to apply same login to the beeline. But when "Enable LDAP Authentication" on Hive Configuration, It caused error on HUE with message "Bad status: 3 (Error validating the login)" and no databases list loading.
Thank you very much for any clue or help.
02-28-2018 01:25 AM
I suppose you have also configured Kerberos on your cluster.
From Cloudera Manager, go to HUE configuration.
Search the "Hue Server Advanced Configuration Snippet (Safety Valve) for hive-site.xml" and add the following property.
or if you use xml view:
<property> <name>hive.server2.authentication</name> <value>kerberos</value>
02-28-2018 01:39 AM
Just to give some more info.
When you enable LDAP authentication for Hive, HUE gets confused and tries also to connect to Hive via LDAP, instead of Kerberos authentication. By setting this configuration, you force HUE to go with Kerberos authentication while your Hive can still accept both.
03-05-2018 01:04 AM
Yes. I've end-up using impersonate user following this article http://gethue.com/ldap-or-pam-pass-through-authentication-with-hive-or-impala/
on core-site.xml by this answer http://community.cloudera.com/t5/Web-UI-Hue-Beeswax/Failed-to-validate-proxy-privilege-of-hue-hive-f...