question can not access hbase in Archives of Support Questions (Read Only)

can not access hbase

archerhuang — Tue, 26 Jan 2016 11:52:33 GMT

Kerberos version: 1.10.3-10

HBase version: 1.1.1

<Pre-condition>

1. Kerberos Installed

1. use root to create hbase4 account

2. registered hbase4 in Kerberos server

3. change user to hbase4 ($su hbase4)

4. get ticket: kinit -k -t /etc/security/keytabs/hbase4.user.keytab hbase4@EXAMPLE.COM

5. $cd /usr/hdp/2.3.0.0-2557/hbase/bin

6. $./hbase shell

7. hbase(main):001:0> create 'results','name','scores'

Actual Result: ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions (user=hbase4@EXAMPLE.COM, scope=default, params= [namespace=default,table=default:results1,family=name|scores],action=CREATE)

Re: can not access hbase

aervits — Tue, 26 Jan 2016 11:55:20 GMT

@Archer Huang

kinit as hbase user and then

grant  'hbase4', 'RWCA'

Re: can not access hbase

Enis — Tue, 26 Jan 2016 11:56:49 GMT

You are getting an Access control exception, because the by default the user is not allowed to create a table. You should give either global level or namespace level privileges to the desired user so that that user can create a table.

Out of the box, only the HBase user will have permissions to grant other permissions, so you have to log in as the hbase user.

You can check https://hbase.apache.org/book.html#appendix_acl_matrix and the security section in the book.

Re: can not access hbase

aervits — Wed, 03 Feb 2016 01:20:30 GMT

@Archer Huang has this been resolved? Can you accept the best answer or provide your own solution?

Re: can not access hbase

kalyandas831 — Thu, 04 Jan 2018 17:33:24 GMT

# sudo -u hbase kinit -kt /etc/security/keytabs/hbase.service.keytab hbase/hive-spike.example.com@EXAMPLE.COM

# sudo -u hbase hbase shell

hbase(main):001:0> grant 'hbase4','RWCA'