KeyTabFile

Optional. Absolute path and file name of the keytab file. A keytab file contains a list of keys that are analogous to user passwords. Applicable if you use Kerberos for authentication.

If you use the KeyTabFile parameter, ensure that the name of the file and the absolute path to the file are the same for all the nodes in a distributed Hadoop cluster.

PrincipalName

Required if you use Kerberos for authentication. Service Principal Name (SPN) of the Hive master server. For example, hive/_Host@realm.com.

You can get the SPN of the Hive master server from the hive.metastore.kerberos.principal property in the following file: ${HIVE_HOME}/conf/hive-site.xml

JDBCUrl

JDBC connection URL to access metadata from Hive.

Use the following format for the JDBC connection URL:

jdbc:hive2://<Host Name>:<Port>/default;<Additional Parameter 1>;<Additional Parameter 2>,...<Additional Parameter N>

The URL format uses the following parameters:

• Host Name. Name of the machine that hosts the Hive master server.
• Port. Port number on which the Hive master server listens.
• Additional Parameter 1,2,...N. Additional parameters that are specific to your environment. For example, in an encrypted environment, use the sasl.qop parameter to specify the type of authentication you use. For example, sasl.qop=auth-conf indicates that the environment uses authentication with confidentiality protection. For more information about the sasl.qop parameter, see the documentation of your Hadoop distribution.

<HiveConfiguration>
   <JDBCUrl>jdbc:hive2://myhost:10000/default;sasl.qop=auth-conf</JDBCUrl>
   <KeyTabFile>/etc/security/keytabs/hive.keytab</KeyTabFile>
   <PrincipalName>hive/_Host@realm.com</PrincipalName>
</HiveConfiguration>