Support Questions
Find answers, ask questions, and share your expertise

Hiverser2 with PAM security gives Login error


Hiverser2 with PAM security gives Login error


HDP 2.3 Ambari 2.1

I have setup Hiveserver2 secured with PAM authentication. On beeline, all my users are getting authenticated successfully after enabling the PAM. My ranger is also provide perfect auditing and access authorization. The Hive View is not working with PAM. In Hiveserver2.log, I am getting these error on every minute. I would like to know which user or service account is having this issue:

2016-03-17 22:55:02,961 ERROR [HiveServer2-Handler-Pool: Thread-59]: transport.TSaslTransport ( - SASL negotiation failure Error validating the login [Caused by Error authenticating with the PAM service: login] at org.apache.hive.service.auth.PlainSaslServer.evaluateResponse( at org.apache.thrift.transport.TSaslTransport$SaslParticipant.evaluateChallengeOrResponse( at at at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport( at org.apache.thrift.server.TThreadPoolServer$ at java.util.concurrent.ThreadPoolExecutor.runWorker( at java.util.concurrent.ThreadPoolExecutor$ at Caused by: Error authenticating with the PAM service: login at org.apache.hive.service.auth.PamAuthenticationProviderImpl.Authenticate( at org.apache.hive.service.auth.PlainSaslHelper$PlainServerCallbackHandler.handle( at org.apache.hive.service.auth.PlainSaslServer.evaluateResponse( ... 8 more


Re: Hiverser2 with PAM security gives Login error

First I want to congratulate you on your choice of PAM authentication. I have a personal crusade against Kerberos for database authentications. Too many problems with too many different JDBC clients.

However I also saw SASL exceptions in the log. I ignored them since they didn't seem to make any problems.

Regarding Hive Views I am not sure if its possible to configure LDAP/PAM authentication for Hive. The documentation doesn't seem to mention them, only kerberos. Perhaps someone from the hive dev team can provide an input?