diff --git a/conf/hive-default.xml.template b/conf/hive-default.xml.template
index a5a85b4..d608a77 100644
--- a/conf/hive-default.xml.template
+++ b/conf/hive-default.xml.template
@@ -2165,6 +2165,7 @@
NONE: no authentication check
LDAP: LDAP/AD based authentication
KERBEROS: Kerberos/GSSAPI authentication
+ PAM: Pluggable authentication module
CUSTOM: Custom authentication provider
(Use with property hive.server2.custom.authentication.class)
@@ -2217,6 +2218,15 @@
+ hive.server2.authentication.pam.services
+
+
+ List of the underlying PAM services that should be used when auth type is PAM.
+ A file with the same name must exist in /etc/pam.d.
+
+
+
+
hive.server2.enable.doAs
true