Check the jdbc.url property in the Ranger/Hive Service config. It should be the same as what you would have used with beeline on command line.
Bosco From: Sanket Gaykar <sanketgaykar....@gmail.com> Reply-To: <user@ranger.apache.org> Date: Wednesday, January 9, 2019 at 4:31 AM To: <user@ranger.apache.org> Subject: Re: ranger fails to connect with hive metastore Can someone please address this issue. On Fri, 4 Jan 2019 at 17:42, Sanket Gaykar <sanketgaykar....@gmail.com> wrote: Hi, We have a dedicate instance for Apache Ranger, where we run the ranger-admin service, also we have installed the Ranger hive plugin on the instance where HiveServer2 is running. Below are the configurations we have: Ranger(Ranger-Admin) running on SSL and Kerberos. HiveServer2 running on SSL and Kerberos. Hive Metastore (mysql) runs only SSL. Web Ui has the following configurations: Service name : hive Active status: enabled Username: admin Password: *** Extra configurations: hive.site.file.path: /etc/hive/conf/hive-site.xml policy.auth.download.users: hive tag.auth.download.users:hive enable.hive.metastore.lookup: true However when ranger tries to connect to Hive Metastore when using auto suggest while creating policies we get the following error: SASL negotiation failure. No common protection layer between client and server.