Purpose

Specifies the service principal name to be used for Kerberos authentication.

This property is supported only for HiveServer2 connections.

Valid Values

ServicePrincipalName

where:

ServicePrincipalName
is the three-part service principal name registered with the key distribution center (KDC).
Note: Your service principal name is the value of the hive.server2.authentication.kerberos.principal property in the hive-site.xml file.

You must specify the service principal name using the following format:

Service_Name/Fully_Qualified_Domain_Name@REALM.COM

where:

Service_Name
is the name of the service hosting the instance. For example, yourservicename.

Depending on the Hive distribution you use, the name of the service is defined either automatically by the server or manually by the user who created the service. For instance, CDH distributions automatically generate a service name of hive, while Apache Hadoop distributions require that the service name be manually defined by the user. Refer to your distribution's documentation for additional information.

Fully_Qualified_Domain_Name

is the fully qualified domain name of the host machine. For example, yourserver.example.com.

REALM.COM

is the domain name of the host machine. This part of the value must be specified in upper-case characters. For example, EXAMPLE.COM.

Example

The following is an example of a valid service principal name:

yourservicename/yourserver.example.com@EXAMPLE.COM

Notes

  • If unspecified, the value of the ServerName property is used as the service principal name.
  • If AuthenticationMethod is set to userIdPassword , the value of the ServicePrincipalName property is ignored.

Default

None

See also