For production environment, Kerberos is the best method of authentication. If you want to do a proof of concept, LDAP can be used for securing Hive. To override the kerberos requirement, the following property has to be set in sentry-site.xml <property> <name>sentry.hive.testing.mode</name> <value>true</value> </property> All other LDAP properties can be set on the Hive configuration page on CM. ... View more