question Re: Where can I configure sentry policies in cloudera manager 5.1? in Archives of Support Questions (Read Only)

Where can I configure sentry policies in cloudera manager 5.1?

seafrog — Fri, 16 Sep 2022 09:06:11 GMT

When I was trying to selecting "Enable Sentry Authorization using Policy Files" and click save in Hive configuration, cloudera manager shows:

Sentry authorization cannot be enabled using both policy files and Sentry service at the same time.

Because I used both sentry service and policy based sentry here. Does anyone knows where can I configure policies or its counterparts with cloudera manager? Does the new sentry service still maintain sentry-provider.ini? Thanks!

Re: Where can I configure sentry policies in cloudera manager 5.1?

Darren — Wed, 27 Aug 2014 23:41:06 GMT

Hi,

Sentry service stores policy information in a relational database, whereas the Policy File implementation uses a file. You should never use both at the same time as that would be redundant. When using Sentry service, you issue grants and revokes via the HiveServer2 client beeline.

The descriptions for the Sentry configuration in the CM UI have links to documentation explaining the usage, which should answer all of your questions.

Thanks,
Darren