User domain accounts become locked when you connect to Hive using SAS/ACCESS^® Interface to Hadoop under the following conditions: 

• You use a Hadoop LIBNAME statement.
• You do not provide a user ID or password.
• You use AUTHDOMAIN.

This problem occurs because Hadoop and Hive support Lightweight Directory Access Protocol (LDAP) authentication. When you connect to Hive under the conditions listed above, the SAS/ACCESS^® Interface to Hadoop engine uses the current user's domain user ID. Because the password is missing, the login attempt is rejected by Hive. After three attempts, the user's domain account is locked due to active directory security rules.

Previously, SAS/ACCESS Interface to Hadoop supported the Hadoop SIMPLE Authentication method, which allowed Hive users to connect using only a user name with no password.   

Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.

Operating System and Release Information

Viya on Linux: An update for this issue is available for SAS Viya 3.5. For instructions on how to access and apply software updates, see the Updating Your SAS Viya software section in the SAS Viya 3.5 for Linux Deployment Guide at