HPE Ezmeral Data Fabric 6.2 is In Maintenance and transitions to "End of Maintenance" in June 2024. Please see the latest documentation.

About Release 6.2
This site contains documentation for HPE Ezmeral Data Fabric release 6.2 including installation, configuration, administration, and reference content, as well as content for the associated bundled ecosystem components and drivers.
6.2 Installation
This section contains information about installing and upgrading HPE Ezmeral Data Fabric software. It also contains information about how to migrate data and applications from an Apache Hadoop cluster to a HPE Ezmeral Data Fabric cluster.
6.2 Data Fabric
HPE Ezmeral Data Fabric is the industry-leading data platform for AI and analytics that solves enterprise business needs.
6.2 Administration
This section describes how to manage the nodes and services that make up a cluster.
6.2 Development
This section contains information related to application development for Ezmeral ecosystem components and HPE Ezmeral Data Fabric products, including the file system, Database (Key-Value and JSON), and Event Streams.
- Application Development Process
  Before you start developing applications on the HPE Ezmeral Data Fabric platform, consider how you will get the data into the platform, the storage format of the data, the type of processing or modeling that is required, and how the data will be accessed.
- File Store and Apps
  The following sections provide information about accessing the File Store with C and Java applications.
- HPE Ezmeral Data Fabric Database and Apps
  This section contains information about developing client applications for JSON and key-value tables.
- HPE Ezmeral Data Fabric Streams and Apps
  HPE Ezmeral Data Fabric Streams brings integrated publish and subscribe messaging to HPE Ezmeral Data Fabric.
- MapReduce and Apps
  This section contains information associated with developing YARN applications.
- Kubernetes Interfaces for Data Fabric
  This section describes how to leverage the capabilities of the Kubernetes Interfaces for Data Fabric.
- Ecosystem Components
  The following sections provide information about each open-source project that is supported by the HPE Ezmeral Data Fabric.
  - Ezmeral Ecosystem Packs
  - Apache Airflow
    This topic provides an overview of Apache Airflow on HPE Ezmeral Data Fabric.
  - AsyncHBase
  - Cascading
  - Apache Drill
  - Flume
  - Hadoop
  - HBase
  - HBase Client and HPE Ezmeral Data Fabric Database Binary Tables
  - HCatalog
  - Hive
    - Getting Started with Hive
    - Configuring Hive
      - Configure Hive Directories
      - Configuring Hive Client on Data Fabric Client Node
        This topic describes how to configure the Hive client on a Data Fabric client node.
      - Configuring MSCK REPAIR TABLE
        This section guides you through configuring MSCK REPAIR TABLE command to compare and update the partitions in Hive Metastore and file systems.
      - Configuring Database for Hive Metastore
      - User Impersonation for Hive
      - Hive Security
        Hive Security Configuration Options
        This section describes changes made in Hive default configuration. It shows how to configure Hive after manual installation.
        Hive Authentication
        The authentication method that you configure for the Hive Metastore, HiveServer2, and WebHcat determines how these Hive components access and connect to each other.
        Configuring Hive for SCRAM Token Authentication
        This topic describes the manual and automatic options to configure Hive for SCRAM token authentication.
        Hive Encryption
        When you configure encryption, the thrift messages sent between the Hive Metastore, HiveServer 2, and HiveServer2 clients are encrypted.
        Hive Password Encryption
        EEP 4.0 introduces default configuration for Hive Metastore password encryption using the data-fabric Installer. The password is stored in the hive-site.xml file.
        Hive Authorization
        MapR Data Platform has built-in platform authorization that protects all data regardless of the execution engine. This topic describes alternative authorization modes you can choose to implement.
        Fallback Hive Authorizer
        Fallback Hive Authorizer is used by Hive DDL (Data Definition Language) tasks for access control and for checking authorization from Driver.doAuthorization().
    - Integrating Hive
    - Managing Hive Services
    - Connecting to Hive
    - Enabling High Availability for Hive
      This section describes how to enable High Availability for HiveServer2 and HiveMetastore.
    - Hive Features in HPE Ezmeral Data Fabric
      Describes HPE Ezmeral Data Fabric-specific features in Hive.
    - Hive 2.3 API Changes
      This topic describes the public API changes that occurred between Hive 2.1 EEP 5.0.0 and Hive 2.3 EEP 6.0.0.
    - Hive 2.1 API
    - Troubleshooting Hive and Tez
    - Hive Logging
      This section describes Hive logging for Hive 2.1 and later releases and includes information about log splitting.
  - HttpFS
  - Hue
  - Impala
  - Livy
    Apache Livy is primarily used to provide integration between Hue and Spark.
  - HPE Ezmeral Data Fabric Streams Clients and Tools
    Describes the supported HPE Ezmeral Data Fabric Streams tools and clients.
  - S3 Gateway
    The S3 gateway is a service that provides an S3-compatible interface to expose data in HPE Ezmeral Data Fabric as objects. The S3 gateway manages all inbound S3 API requests to put data into and get data out of cloud storage.
  - Oozie
  - Pig
  - Sentry
  - Apache Spark
  - Sqoop
  - YARN
- Maven and the HPE Ezmeral Data Fabric
  This section discusses topics associated with Maven and the HPE Ezmeral Data Fabric.
- Developer's Reference
  This section contains in-depth information for the developer.
- API Documentation
  HPE Ezmeral Data Fabric supports public APIs for file system, HPE Ezmeral Data Fabric Database, and HPE Ezmeral Data Fabric Streams. These APIs are available for application-development purposes.
Other Docs
This section contains release-independent information, including: Installer documentation, Ecosystem release notes, interoperability matrices, security vulnerabilities, and links to other data-fabric version documentation.
Glossary
Definitions for commonly used terms in MapR Converged Data Platform environments.

Configuring Hive for SCRAM Token Authentication

This topic describes the manual and automatic options to configure Hive for SCRAM token authentication.

Starting from EEP 8.1.0, Hive supports SCRAM token and SCRAM-SHA-256 authentication in HPE Ezmeral Data Fabric.

Table 1. Description of `hive.delegation.token.authentication`
#	Property	Data Type	Default value	Description
1	hive.delegation.token.authentication	String	DIGEST	Delegation token authentication method. Possible values are DIGEST, SCRAM

To connect to HiveServer2 on EEP 8.1.0 from Hive client on EEP 8.0.x, set hive.delegation.token.authentication property in HPE Ezmeral Data Fabric.

Manually Configuring SCRAM Token Authentication

To configure SCRAM token and SCRAM-SHA-256 authentication, set the following property on HIVE_HOME/conf/hive-site.xml file:

<property>
    <name>hive.delegation.token.authentication</name>    
    <value>SCRAM</value>  
</property>

The default value for hive.delegation.token.authentication is DIGEST.

To use hive.delegation.token.authentication for Hive, configure Hadoop for SCRAM:

Set the value of hadoop.security.token.authentication.method property to SCRAM-SHA-256 in yarn-site.xml file.
Set scram.password property and ensure encrypted password file is available in file system.

To learn more, see Hadoop documentation.

Auto Configuring SCRAM Token Authentication

Execute MAPR_HOME/server/configure.sh -R script on a newly installed Data-Fabric SASL or KERBEROS secured cluster to automatically configure the following authentications:

For a FIPS enabled cluster, Hive configures hive.delegation.token.authentication=SCRAM authentication.
For a non-FIPS cluster if you configure Hadoop with hadoop.security.token.authentication.method=SCRAM authentication, Hive configures the SCRAM authentication.
For other clusters, Hive configures hive.delegation.token.authentication=DIGEST authentication.

For non-secure clusters, Hive configures hive.delegation.token.authentication=DIGEST authentication.

You can see hive.delegation.token.authentication property in HIVE_HOME/conf/hive-site.xml when you execute configure.sh command on newly installed cluster.

When you upgrade Hive, the upgrade does not update the value of the set hive.delegation.token.authentication property.

Manually set the value of hive.delegation.token.authentication property when you change the cluster settings from FIPS to non-FIPS or from non-FIPS to FIPS.