Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

duplicate property definitions after Ambari upgrade

avatar
Guru

Hi ,

I upgraded Ambari from 2.0.1 to 2.1.2 and while investigating into a beeline issue I detected a possible 'mis-behaviour' in the Hive config section

934-capture.png

Why are the properties 'hive.security.authorization.manager' and 'hive.security.authorization.enabled' listed twice ? And what me concerns even more, the auth.manager is listed with different values ?!?!?!

A check of the hiveserver2-site.xml shows the XaSecure... -setting seems to be applied

$ grep -E2 hive.security.authorization.manager hive*.xml
hiveserver2-site.xml-    </property>
hiveserver2-site.xml-    <property>
hiveserver2-site.xml:        <name>hive.security.authorization.manager</name>
hiveserver2-site.xml-        <value>com.xasecure.authorization.hive.authorizer.XaSecureHiveAuthorizerFactory</value>
hiveserver2-site.xml-    </property>
--
hiveserver2-site.xml-    <property>
hiveserver2-site.xml-        <name>hive.conf.restricted.list</name>
hiveserver2-site.xml:        <value>hive.security.authorization.enabled,hive.security.authorization.manager,hive.security.authenticator.manager</value>
hiveserver2-site.xml-    </property>
hiveserver2-site.xml-</configuration>

Do I have a messed up config, or is this a bug in Ambari ?!?!

1 ACCEPTED SOLUTION

avatar
Master Mentor
@Gerd Koenig

This is from my env before enabling Ranger for Hive

935-screen-shot-2015-12-19-at-64010-pm.png

This is after Ranger

936-screen-shot-2015-12-19-at-64242-pm.png

I believe that it's normal

View solution in original post

2 REPLIES 2

avatar
Master Mentor
@Gerd Koenig

This is from my env before enabling Ranger for Hive

935-screen-shot-2015-12-19-at-64010-pm.png

This is after Ranger

936-screen-shot-2015-12-19-at-64242-pm.png

I believe that it's normal

avatar
Guru

Thanks @Neeraj Sabharwal

You are not concerned about having different values for "Enable authorization" before enabling Ranger 😉 ?