2.3.4. Configuring Secure WebHCat

Use the following description to set up secure WebHCat.

Using a text editor, edit the /etc/hcatalog/conf/webhcat-site.xml file, to add or modify the following information:

</property>
    <name>templeton.kerberos.principal</name>
    <value>HTTP/host1234.example.com@EXAMPLE.COM</value>
    <description/>
<property>

The property templeton.kerberos.principal must use the hostname of the WebHCat Server

<property>
    <name>templeton.kerberos.keytab</name>
    <value>/etc/security/keytabs/spnego.service.keytab</value>
    <description/>
</property>

<property>
    <name>templeton.kerberos.secret</name>
    <value>secret</value>
    <description/>
</property>

<property>
    <name>templeton.hive.properties</name>
    <value>hive.metastore.local=false,hive.metastore.uris=thrift://host1234.example.com:9083,
                    hive.metastore.sasl.enabled=true,hive.metastore.execute.setugi=true,
                    hive.exec.mode.local.auto=false,
                    hive.metastore.kerberos.principal=hive/_HOST@EXAMPLE.COM</value>
         <description>Properties to set when running hive.</description>
</property>

Be sure to set the templeton.hive.properties property with the hostname for your Thrift server.

Index