Beeline : Access denied to Hive

[bytebiscuit]

We obtain a hive ticket in Kerberos and connect to beeline successfully.

Once in beeline, we run: show roles to see Sentry roles but we get a “ ……… Access denied to hive”

In the log file it says that:

…………………..HadoopGroupsMappingService: unable to obtain group for hive

………………………………………………………

……………………………………

…………

How do I go around this issue. How to add a new admin user in Sentry or make the hive user an admin user in Sentry.

[GeKas]

In general, admin groups are added in sentry's configuration -> https://www.cloudera.com/documentation/enterprise/latest/topics/sg_sentry_service_config.html#concep...

Your issue is that hive user is not configured properly. Did you manually created users?

If you run "id hive" in your system, the user hive should belong to group hive. If you fix this, probably you should be able to set sentry rules as hive, because by default hive group should be defined as admin group.

If you are not using Cloudera Manager, then set "sentry.service.admin.group"