Hi all, I am trying to make SASL work with hive. it is enabled via hive.metastore.sasl.enabled = true
hive.metastore.kerberos.keytab.file=/etc/hive/conf/hive.keytab hive.metastore.kerberos.principal = hive/cdh4.ec2.internal@EC2.INTERNAL I have checked the keytab and looks ok, [root@cdh4 hive]# ktutil ktutil: rkt /etc/hive/conf/hive.keytab ktutil: list -e slot KVNO Principal ---- ---- --------------------------------------------------------------------- 1 4 hive/cdh4.ec2.internal@EC2.INTERNAL (Triple DES cbc mode with HMAC/sha1) 2 4 hive/cdh4.ec2.internal@EC2.INTERNAL (DES cbc mode with CRC-32) however, starting hive --service metastore, I get an error: org.apache.thrift.transport.TTransportException: Kerberos principal should have 3 parts: My principal, as shown above, does have 3 parts - 1.hive , 2.FQDN, 3.REALM What's missing here? thanks Sincerely, Ameet