Hive
| ![[Important]](../common/images/admon/important.png) | Important | 
|---|---|
| You should not use the Hive CLI after enabling the Ranger Hive plugin. The Hive CLI is not supported in HDP-2.2.0 and higher versions, and may break the install or lead to other unpredictable behavior. Instead, you should use the HiveServer2 Beeline CLI. | 
To enable the Ranger HBase plugin on a Kerberos-enabled cluster, perform the steps described below.
- Create the system (OS) user hiveuser. Make sure this user is synced to Ranger Admin (under users/groups tab in the Ranger Admin UI). 
- Create a Kerberos principal for hiveuser by entering the following command: - kadmin.local -q 'addprinc -pw hiveuser hiveuser@example.com
 
- Navigate to the Hive service. 
- Click on the Config tab and navigate to advanced ranger-hive-plugin-properties. 
- Update the following properties with the values listed in the table below. - Table 5.2. Hive Plugin Properties - Configuration Property Name - Value - Ranger repository config user - hiveuser@example.com - Ranger repository config password - hiveuser - common.name.for.certificate - blank 
- After updating these properties, click Save and then restart the Hive service. 

