question Re: Ambari Hive View: How to make Hive queries run as current user? in Support Questions

Ambari Hive View: How to make Hive queries run as current user?

christopher_w_m — Mon, 19 Aug 2019 10:31:56 GMT

We have a kerberized cluster and just finished configuring the Hive and HDFS views inside Ambari 2.1.2.1 by following the documentation here: http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_ambari_views_guide/content/section_kerberos_setup_hive_view.html

I'm able to login to ambari with my username to use both the Hive and HDFS view OK. I'm testing these views with Ranger now. The problem is the Hive view seems to be running as the ambari-server user.

How do make the hive view run queries as my username instead of ambari-server?

Note: The HDFS view seems to be working correctly because I can see the correct username in the audit logs.

Re: Ambari Hive View: How to make Hive queries run as current user?

sunile_manjee — Sat, 04 Jun 2016 03:35:45 GMT

@Kit Menke have you enabled hive impersonations? link to best practice. More on enabling hive impersonations here.

Re: Ambari Hive View: How to make Hive queries run as current user?

christopher_w_m — Sat, 04 Jun 2016 04:26:03 GMT

@Sunile Manjee I think Scenario #1 is what I'm aiming for. I set "Run as end user instead of Hive user" to false but still I'm seeing ambari-server show up in the ranger audit log.

Re: Ambari Hive View: How to make Hive queries run as current user?

abajwa — Sat, 04 Jun 2016 06:16:32 GMT

There seems to be a missing param in the docs for "Hive authentication" property. It should work after you add the bolded below to pass in user logged into ambari as the hive.server2.proxy.user:

auth=KERBEROS;principal=hive/HIVE_HOST@REALM;hive.server2.proxy.user=${username}

@bganesan: seems like we may need to update our doc

Re: Ambari Hive View: How to make Hive queries run as current user?

jeff1 — Sat, 04 Jun 2016 06:17:47 GMT

Wonder if you are hitting this issue?

https://issues.apache.org/jira/browse/AMBARI-13875

It's fixed in Ambari 2.2+. The latest Ambari is 2.2.2.0 and upgrade docs / general docs can be found here:

http://docs.hortonworks.com/HDPDocuments/Ambari/Ambari-2.2.2.0/index.html

Re: Ambari Hive View: How to make Hive queries run as current user?

christopher_w_m — Sat, 04 Jun 2016 06:30:03 GMT

@jeff That does look like what I'm running into. I tried adding hive.server2.proxy.user as suggested by @Ali Bajwa but it didn't have any affect so must be that bug. I'll see if we can update Ambari.

Re: Ambari Hive View: How to make Hive queries run as current user?

bandarusridhar1 — Sat, 04 Jun 2016 20:49:52 GMT

@Kit Menke

Can you please check is below property set in hive-site.xml, if not please set it and try.

hive.server2.enable.doAs = true

Link for more details.

Re: Ambari Hive View: How to make Hive queries run as current user?

christopher_w_m — Wed, 08 Jun 2016 21:34:21 GMT

@Sri Bandaru I've tried changing doAs to both true and false and saw the same behavior either way when using the Ambari Hive view. We want to leave it as false anyways.

Re: Ambari Hive View: How to make Hive queries run as current user?

christopher_w_m — Thu, 09 Jun 2016 04:07:16 GMT

After upgrading to Ambari 2.2.2.0 and adding hive.server2.proxy.user=${username} to the Ambari Hive View config this started working. Thanks @jeff and @Ali Bajwa!

Re: Ambari Hive View: How to make Hive queries run as current user?

abajwa — Thu, 09 Jun 2016 05:57:58 GMT

@Kit Menke glad to hear it! Thanks for taking the time to update the forum after getting it working.

Re: Ambari Hive View: How to make Hive queries run as current user?

abajwa — Thu, 09 Jun 2016 10:16:07 GMT

Per the JIRA from Jeff, looks like the feature did not work prior to Ambari 2.2+. The relevant doc section in Ambari 2.2.0.0 looks ok so I think we are good. Although it might be good to update older docs to explicitly call out the fact that running queries as logged in user won't work.