Is the Kerberos authentication enabled on the cluster? As the above comment suggests, you should use the fully-qualified domain name (FQDN) instead of IP address when Kerberos is enabled.
Also note that the port 10001 should be the HTTP transport mode port. The "hive_server_port" on the other hand is for binary transport, and that should be port 10000 on the HS2. This is also explained in the hue.ini reference quoted before.
# Binary thrift port for HiveServer2. ## hive_server_port=10000
# Http thrift port for HiveServer2. ## hive_server_http_port=10001