Configuring Sentry for Hive Authorization

[@HadoopEngineering]

Thanks Kishore .Please stay tuned I will be adding more topics over time. Please subscribe to my channel.

[@pbhadange9514]

Thanks for uploading this video. Very clear explanation of sentry concept.

[@RavindraKumarSG]

Very Nicely done. Thanks..

[@bsrameshonline]

very insightful explanation. Thank you very much.

[@mikespector225]

good video..keep it up..nice work

[@HadoopEngineering]

Thanks Mike

[@gotoabid]

Thanks for explaining in clear way :)

[@HadoopEngineering]

Thanks for your comments..Please subscribe my channel to get more periodic updates kzbin.info

[@TheKishore432]

Really helpful video.. thanks for uploading

[@HadoopEngineering]

Please subscribe to my channel kzbin.info

[@AMITKUMAR8017]

Great 👌👌👌👌

[@vivekb1988]

Very well explained.. Did really helped that he showed the CM and Hive CLI while explaining... I have a doubt that don't we need to dedicate a database for sentry and also give 0771 permission to /user/hive/warehouse before the process starts..?

[@nirmalkumar3900]

Thank you for a wonderful video. Its really helpful..

[@AJ-hp3te]

SIr can you make a video on any ticketing tool like jira etc

[@kunalattatanagar]

Thanks... It helped

[@tacky0]

I have a AD Kerberized cluster, when I do ID USERNAME, it doesn't show up user or groups in terminal ? am i missing something

[@HadoopEngineering]

AD Kerberose enabling does not add that users to back end Linix servers . You need to use separate tools like SSSD / Winbind /Quest /Centrify tools to do that integration

[@mubashirchamanshaikh419]

hive/warehouse is owned by hive is that necessary to sync hdfs acl with sentry permission??

[@adnanshaikh7480]

tiny.cloudera.com/sentry-sync-cm5 this should help

[@miaohe5301]

Excellent video and very clear explanation. It helps me a lot on understanding the sentry configuration. I am trying to configure the sentry for hive following your example. The environment is in cloudera vm quickstart, and I do not have access to cloudera manager due to the limitation of my computer. I can connect beeline to hive server, I can execute commands like "show tables; create database;" properly. However, I cannot execute the command "create role/CREATE ROLE", the error is "Error: Error while compiling statement: FAILED: SemanticException The current builtin authorization in Hive is incomplete and disabled. (state=42000,code=40000)". Do you have any idea about the reason and would you please tell me how I can solve this?? Thank you very much for your patience! I do appreciate it if you could reply.

[@HadoopEngineering]

@He Madao - Thanks for your comment , it may be because sentry service is not enabled for Hive service .I know it is bit challenging with lower end configuration machine . I recommend you to try in cloud . Please send a note to hadoopengineering at gmail dot com , I will help you sometime when I am free.

[@miaohe5301]

Thank you very much for this rapid reply and help! I will try to enable the sentry for hive at first and send you the note. Thanks again!!

[@adnanshaikh7480]

Check if the user has permissions.. check if the user is an Sentry-admin... only a sentry-admin has the permissions to create or grant roles to a group

[@masthanreddy3014]

Can you please add translations to each videos.Learnes can copy those commands and practise same on their machines.

[@debasisbanerjee6640]

Bro , everything can't get spoon fed. Learner should do that much on his/her own effort.

[@pbhadange9514]

I have configured the sentry service, before configuration I can able to login hive and DB acces beeline but after configuration facing below error while accessing database and creating role: -------------------------------------- Beeline version 1.1.0-cdh5.13.1 by Apache Hive 0: jdbc:hive2://slave5:10000> show databases; Error: Error while compiling statement: FAILED: InvalidConfigurationException hive.server2.authentication can't be none in non-testing mode (state=42000,code=40000) 0: jdbc:hive2://slave5:10000> ---------------------------------------------------- can anyone suggest, what is wrong.?

[@HadoopEngineering]

Did you enable Kerberos ?

[@pbhadange9514]

NO, I haven't configured kerberos on my cluster..

[@HadoopEngineering]

Kerberos is one of the pre-requisite for Sentry

[@pbhadange9514]

Hadoop Engineering okay, Thanks for kind reply.. Got it

[@HadoopEngineering]

You are welcome..Please subscribe this channel to get updates.I will be adding more topics over time

[@akashroy3851]

to anyone getting : Error: Error while compiling statement: FAILED: InvalidConfigurationException hive.server2.authentication can't be none in non-testing mode (state=42000,code=40000) use this link to resolve : community.cloudera.com/t5/Support-Questions/Sentry-doesn-t-seem-to-work-with-LDAP-CDH-5-3/td-p/23673