We figured this out. In order for the username/password as which you are connecting to work, you need to prefix it with the domain. For example,
jdbc:hive2://myhost:10000/;user=domain%5cmyusername;password=mypwd
The encoded backslash (%5c) was required to pass the java network string parsing rules.