Configuring hive server to proxy the connecting user at the Hadoop level

[mhd wrk <mh...@gmail.com>]

In my kerberosied environment the only way I can get the hive server to
proxy a non Hadoop-level superuser at HDFS level is to use Trusted
Delegation as explained here
<https://www.cloudera.com/documentation/enterprise/5-8-x/topics/cdh_sg_hiveserver2_security.html#concept_vjq_c3x_nm>.
According to the snippet below seems that there's a way to configure the
server to proxy non superusers as well.Has anyone done this before? Do you
know where I can find more information?

HiveServer2 determines the identity of the connecting user from the
> underlying authentication subsystem (Kerberos or LDAP). Any new session
> started for this connection runs on behalf of this connecting user. If the
> server is configured to proxy the user at the Hadoop level, then all
> MapReduce jobs and HDFS accesses will be performed with the identity of the
> connecting user.
>


thanks