Hive Authentication using Active Directory

[Mandus Momberg <ma...@wifi-technologies.co.za>]

Hi Everyone.

I am sorry to bother you all with this issue, but I have been trying to 
solve the issue for 2 weeks now, and I am nowhere closer to finding a 
solution.

I am running a cluster with
Hadoop 2.2.0
Hive version 0.11.0.2 [ HiveServer2 ]

I am trying to do Hive Authentication using LDAP and more Specifically 
Active Directory 2008.
The Hive documentation states that you should have the following added 
to your hive-site.xml

<property>
   <name>hive.server2.authentication</name>
   <value>LDAP</value>
</property>
<property>
   <name>hive.server2.authentication.ldap.url</name>
   <value>LDAP_URL</value>
</property>

Which I have done in my environment, but I keep getting this error:

2014-06-16 08:18:55,054 ERROR org.apache.thrift.transport.TSaslTransport 
(TSaslTransport.java:open(296)) - SASL negotiation failure 
javax.security.sasl.SaslException: Error validating the login [Caused by 
javax.security.sasl.AuthenticationException: Error validating LDAP user] 
at 
org.apache.hive.service.auth.PlainSaslServer.evaluateResponse(PlainSaslServer.java:134) 
at 
org.apache.thrift.transport.TSaslTransport$SaslParticipant.evaluateChallengeOrResponse(TSaslTransport.java:509) 
at 
org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:264) 
at 
org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41) 
at 
org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216) 
at 
org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:189) 
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) 
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) 
at java.lang.Thread.run(Thread.java:744) Caused by: 
javax.security.sasl.AuthenticationException: Error validating LDAP user 
at 
org.apache.hive.service.auth.LdapAuthenticationProviderImpl.Authenticate(LdapAuthenticationProviderImpl.java:65) 
at 
org.apache.hive.service.auth.PlainSaslHelper$PlainServerCallbackHandler.handle(PlainSaslHelper.java:63) 
at 
org.apache.hive.service.auth.PlainSaslServer.evaluateResponse(PlainSaslServer.java:127) 
... 8 more 2014-06-16 08:18:55,068 ERROR 
org.apache.thrift.server.TThreadPoolServer 
(TThreadPoolServer.java:run(215)) - Error occurred during processing of 
message. java.lang.RuntimeException: 
org.apache.thrift.transport.TTransportException: Error validating the 
login at 
org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:219) 
at 
org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:189) 
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) 
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) 
at java.lang.Thread.run(Thread.java:744) Caused by: 
org.apache.thrift.transport.TTransportException: Error validating the 
login at 
org.apache.thrift.transport.TSaslTransport.sendAndThrowMessage(TSaslTransport.java:221) 
at 
org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:297) 
at 
org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41) 
at 
org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216) 
... 4 more