Page History

...

Allow JDO query pushdown for integral partition columns in metastore. Off by default. This improves metastore performance for integral columns, especially if there's a large number of partitions. However, it doesn't work correctly with integral values that are not normalized (e.g. have leading zeroes, like 0012). If metastore direct SQL is enabled and works, this optimization is also irrelevant.

HiveServer2

HiveServer2 was added in Hive 0.11.0 with HIVE-2935.  For more information see Setting Up HiveServer2 and HiveServer2 Clients.

hive.server2.thrift.port

• Default Value: 10000
• Added In: Hive 0.11.0 with HIVE-2935

Port number of HiveServer2 Thrift interface. Can be overridden by setting $HIVE_SERVER2_THRIFT_PORT.

hive.server2.thrift.bind.host

• Default Value: localhost
• Added In: Hive 0.11.0 with HIVE-2935

Bind host on which to run the HiveServer2 Thrift interface. Can be overridden by setting $HIVE_SERVER2_THRIFT_BIND_HOST.

hive.server2.thrift.min.worker.threads

• Default Value: 5
• Added In: Hive 0.11.0 with HIVE-2935

Minimum number of Thrift worker threads.

hive.server2.thrift.max.worker.threads

• Default Value: 100 in Hive 0.11.0, 500 in Hive 0.12.0 and later
• Added In: Hive 0.11.0 with HIVE-2935

Maximum number of Thrift worker threads.

hive.server2.authentication

• Default Value: NONE
• Added In: Hive 0.11.0 with HIVE-2935

Client authentication types.

NONE: no authentication check
LDAP: LDAP/AD based authentication
KERBEROS: Kerberos/GSSAPI authentication
CUSTOM: Custom authentication provider (use with property hive.server2.custom.authentication.class)
PAM: Pluggable authentication module (added in Hive 0.13.0 with HIVE-6466)

hive.server2.authentication.kerberos.keytab

• Default Value: (empty)
• Added In: Hive 0.11.0 with HIVE-2935

Kerberos keytab file for server principal.

hive.server2.authentication.kerberos.principal

• Default Value: (empty)
• Added In: Hive 0.11.0 with HIVE-2935

Kerberos server principal.

hive.server2.authentication.ldap.url

• Default Value: (empty)
• Added In: Hive 0.11.0 with HIVE-2935

LDAP connection URL.

hive.server2.authentication.ldap.baseDN

• Default Value: (empty)
• Added In: Hive 0.11.0 with HIVE-2935

LDAP base DN.

hive.server2.custom.authentication.class

• Default Value: (empty)
• Added In: Hive 0.11.0 with HIVE-2935

Custom authentication class. Used when property hive.server2.authentication is set to 'CUSTOM'. Provided class must be a proper implementation of the interface org.apache.hive.service.auth.PasswdAuthenticationProvider. HiveServer2 will call its Authenticate(user, passed) method to authenticate requests. The implementation may optionally extend Hadoop's org.apache.hadoop.conf.Configured class to grab Hive's Configuration object.

hive.server2.enable.doAs

• Default Value: xx
• Added In: Hive 0.11.0 with HIVE-2935 and HIVE-4356

X

hive.server2.x

• Default Value: xx
• Added In: Hive 0.12.0 with HIVE-x

X

hive.server2.x

• Default Value: xx
• Added In: Hive 0.12.0 with HIVE-x

X

hive.server2.x

• Default Value: xx
• Added In: Hive 0.12.0 with HIVE-x

X

hive.server2.x

• Default Value: xx
• Added In: Hive 0.12.0 with HIVE-x

X

hive.server2.x

• Default Value: xx
• Added In: Hive 0.12.0 with HIVE-x

X

hive.server2.x

• Default Value: xx
• Added In: Hive 0.12.0 with HIVE-x

X

hive.server2.x

• Default Value: xx
• Added In: Hive 0.12.0 with HIVE-x

X

Indexing

Indexing was added in Hive 0.7.0 with HIVE-417, and bitmap indexing was added in Hive 0.8.0 with HIVE-1803.  For more information see Indexing.

...

Comma separated list of non-SQL Hive commands that users are authorized to execute. This can be used to restrict the set of authorized commands. The currently supported command list is "set,reset,dfs,add,delete,compile" and by default all these commands are authorized. To restrict any of these commands, set hive.security.command.whitelist to a value that does not have the command in it. 

Hive Client Security

hive.security.authorization.enabled

...