HPE Ezmeral Data Fabric 6.1.x is In Maintenance and transitions to "End of Maintenance" in June 2024. Please see the latest documentation.

About MapR 6.1
This site contains the main documentation for Version 6.1 of the MapR Converged Data Platform, including installation, configuration, administration, and reference information.
6.1 Installation
This section contains information about installing and upgrading MapR software. It also contains information about how to migrate data and applications from an Apache Hadoop cluster to a MapR cluster.
6.1 MapR Data Platform
MapR Data Platform is the industry-leading data platform for AI and analytics that solves enterprise business needs.
6.1 Administration
This section describes how to manage the nodes and services that make up a cluster.
6.1 Development
This section contains information related to application development for Ezmeral ecosystem components and MapR Data Platform products, including the file system, Database (Key-Value and JSON), and Event Streams.
- Application Development Process
  Before you start developing applications on the MapR Data Platform platform, consider how you will get the data into the platform, the storage format of the data, the type of processing or modeling that is required, and how the data will be accessed.
- MapR XD and Apps
  The following sections provide information about accessing the MapR XD with C and Java applications.
- MapR Database and Apps
  This section contains information about developing client applications for JSON and key-value tables.
- MapR Event Store For Apache Kafka and Apps
  MapR Event Store For Apache Kafka brings integrated publish and subscribe messaging to MapR Data Platform.
- MapReduce and Apps
  This section contains information associated with developing YARN applications.
- MapR Data Science Refinery
  The MapR Data Science Refinery product is an easy-to-deploy and scalable data science toolkit with native access to all platform assets and superior out-of-the-box security.
- MapR Data Fabric for Kubernetes
  This section describes how to leverage the capabilities of the MapR Data Fabric for Kubernetes.
- Ecosystem Components
  The following sections provide information about each open-source project that is supported by the MapR Data Platform.
  - Ezmeral Ecosystem Packs
  - AsyncHBase
  - Cascading
  - Apache Drill
  - Flume
  - HBase
  - HBase Client and MapR Database Binary Tables
  - HCatalog
  - Hive
    - Getting Started with Hive
    - Configuring Hive
      - Configure Hive Directories
      - Configuring Hive Client on MapR Client Node
        This topic describes how to configure the Hive client on a MapR client node.
      - Configuring MSCK REPAIR TABLE
        This section guides you through configuring MSCK REPAIR TABLE command to compare and update the partitions in Hive Metastore and file systems.
      - Configuring Database for Hive Metastore
      - User Impersonation for Hive
      - Hive Security
        Hive Security Configuration Options
        This section describes changes made in Hive default configuration. It shows how to configure Hive after manual installation.
        Hive Authentication
        The authentication method that you configure for the Hive Metastore, HiveServer2, and WebHcat determines how these Hive components access and connect to each other.
        Authentication for Hive Metastore
        Configuring Hive Metastore Authentication
        This section describes how to configure the hive.metastore.authentication property for secured and unsecured clusters. It describes cases when the property must be configured explicitly and when it can be omitted from hive-site.xml.
        Configure Hive Metastore to use MapR-SASL
        Configuring Hive Metastore Clients to use MapR-SASL
        Configure Hive Metastore to use Kerberos
        Configure Hive Metastore Clients to use Kerberos
        When the Hive Metastore is configured to use Kerberos authentication, you must also configure Hive Metastore Clients to use Kerberos when authenticating with Hive Metastore.
        Authentication for HiveServer2
        Authentication for WebHCat
        Hive Encryption
        When you configure encryption, the thrift messages sent between the Hive Metastore, HiveServer 2, and HiveServer2 clients are encrypted.
        Hive Password Encryption
        EEP 4.0 introduces default configuration for Hive Metastore password encryption using the data-fabric Installer. The password is stored in the hive-site.xml file.
        Hive Authorization
        MapR Data Platform has built-in platform authorization that protects all data regardless of the execution engine. This topic describes alternative authorization modes you can choose to implement.
        Fallback Hive Authorizer
        Fallback Hive Authorizer is used by Hive DDL (Data Definition Language) tasks for access control and for checking authorization from Driver.doAuthorization().
    - Integrating Hive
    - Managing Hive Services
    - Connecting to Hive
    - Enabling High Availability for Hive
      This section describes how to enable High Availability for HiveServer2 and HiveMetastore.
    - Hive Features in MapR Data Platform
      Describes MapR Data Platform-specific features in Hive.
    - Hive 2.3 API Changes
      This topic describes the public API changes that occurred between Hive 2.1 EEP 5.0.0 and Hive 2.3 EEP 6.0.0.
    - Hive 2.1 API
    - Troubleshooting Hive and Tez
    - Hive Logging
      This section describes Hive logging for Hive 2.1 and later releases and includes information about log splitting.
  - HttpFS
  - Hue
  - Impala
  - Livy
    Apache Livy is primarily used to provide integration between Hue and Spark.
  - MapR Event Store For Apache Kafka Clients and Tools
    Describes the supported MapR Event Store For Apache Kafka tools and clients.
  - S3 Gateway
    The S3 gateway is a service that provides an S3-compatible interface to expose data in MapR Data Platform as objects. The S3 gateway manages all inbound S3 API requests to put data into and get data out of cloud storage.
  - Myriad
  - Oozie
  - Pig
  - Sentry
  - Apache Spark
  - Sqoop
  - YARN
  - Zeppelin
- Maven and MapR
  This section discusses topics associated with Maven and MapR.
- Developer's Reference
  This section contains in-depth information for the developer.
- API Documentation
  MapR Data Platform supports public APIs for MapR File System, MapR Database, and MapR Event Store For Apache Kafka. These APIs are available for application-development purposes.
Other Docs
This section contains release-independent information, including: MapR Installer documentation, Ecosystem release notes, interoperability matrices, security vulnerabilities, and links to other MapR version documentation.
Glossary
Definitions for commonly used terms in MapR Converged Data Platform environments.

Configure Hive Metastore to use Kerberos

About this task

Enabling Hive Metastore to use Kerberos authentication requires a kerberos principal, kerberos keytab, and the following configurations.

Complete the following steps on each node where a Hive Metastore is installed:

Procedure

Create a Kerberos server identity and add it to a keytab file. You can use the following commands in a Linux-based Kerberos environment to set up the identity and update the keytab file:
NOTE MapR clusters do not provide Kerberos infrastructure. The tips in this step assume a Linux-based Kerberos environment, and the specific commands for your environment may vary. Consult with your Kerberos administrator for assistance.
```
# kadmin
    : addprinc -randkey username/<FQDN@REALM>
    : ktadd -k /opt/mapr/conf/hive.keytab username/<FQDN@REALM>
```
The hive.keytab file must be owned and readable only by the mapr user.

Configure the following properties in the following file:

/opt/mapr/hive/hive-<version>/conf/hive-site.xml

Property	Value
`hive.metastore.kerberos.keytab.file`	The Keytab file that contains the HiveMetastore principal.
`hive.metastore.kerberos.principal`	<The HiveMetastore principal. For example, mapr/<FQDN@REALM>.>

<property>
  <name>hive.metastore.kerberos.keytab.file</name>
  <value>/opt/mapr/conf/metastore.keytab</value>
  <description>The path to the Kerberos Keytab file containing the metastore thrift server's service principal.</description>                   
</property>
<property>
  <name>hive.metastore.kerberos.principal</name>
  <value>mapr/<FQDN@REALM></value>
  <description>The service principal for the metastore thrift server. The special string _HOST will be replaced automatically with the correct hostname.</description>
</property>

Configure the following properties in /opt/mapr/conf/env.sh on each node where the Hive Metastore is installed:
- Set MAPR_HIVE_LOGIN _OPTS to
```
"-Dhadoop.login=hybrid"
```
- Set MAPR_HIVE_SERVER_LOGIN_OPTS to
```
"-Dhadoop.login=hybrid"
```