Working. Confusing, but working. Thanks for the help. $ klist Ticket cache: FILE:/tmp/krb5cc_1234 Default principal: user1@COMPANY.COM Valid starting Expires Service principal 03/15/16 14:08:08 03/22/16 14:08:08 krbtgt/COMPANY.COM@COMPANY.COM renew until 03/22/16 14:08:08 $ beeline -u 'jdbc:hive2://hiveserver.company.com:10000/default;principal=hive/_HOST@COMPANY.COM' scan complete in 3ms Connecting to jdbc:hive2://hiveserver.company.com:10000/default;principal=hive/_HOST@COMPANY.COM Connected to: Apache Hive (version 0.13.1.2.1.15.0-946) Driver: Hive JDBC (version 0.13.1.2.1.15.0-946) Transaction isolation: TRANSACTION_REPEATABLE_READ Beeline version 0.13.1.2.1.15.0-946 by Apache Hive 0: jdbc:hive2://hiveserver.company.com:1> use database1; No rows affected (0.019 seconds) 0: jdbc:hive2://hiveserver.company.com:1> describe table1; +-------------------------------+------------+----------+ | col_name | data_type | comment | +-------------------------------+------------+----------+ | column1 | string | | .... | column2 | string | | +-------------------------------+------------+----------+ 40 rows selected (0.144 seconds) ... View more

it is confusing that the principal is the hive/_HOST@COMPANY.COM is required, when hiveserver2 is already using that principal. I will test kinit with this combination and post back. ... View more