question Re: Sentry doesn't seem to work with LDAP (CDH 5.3) in Archives of Support Questions (Read Only)

Sentry doesn't seem to work with LDAP (CDH 5.3)

MC — Fri, 16 Sep 2022 09:19:06 GMT

Dear fellow Hadoop users,

A couple of weeks ago we installed CDH 5.3 with LDAP authentication. Everything worked like a charm. Next, we turned on Sentry only to hit a road block. The hiveserver2 log shows the following message:

2015-01-14 14:23:17,267 ERROR org.apache.hive.service.cli.operation.Operation: Error running hive query:
org.apache.hive.service.cli.HiveSQLException: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. MetaException(message:Failed to load Hive binding hive.metastore.sasl.enabled can't be false in non-testing mode)

Not sure about what "non-testing mode" means. Keep in mind that sentry.hive.testing.mode is set to true. We also tried to use the hive.test.mode property to no avail.

Can anyone shed some light on this please?

Thanks!

Re: Sentry doesn't seem to work with LDAP (CDH 5.3)

prasadm — Thu, 15 Jan 2015 03:53:02 GMT

Have you set the testing mode in both HiveServer2 and Metastore safety valves ? Note that Sentry enforces same set of policies on HiveServer2 as well as Metastore.

thanks

Prasad

Re: Sentry doesn't seem to work with LDAP (CDH 5.3)

MC — Thu, 15 Jan 2015 15:51:48 GMT

I tried that too with no success.

Re: Sentry doesn't seem to work with LDAP (CDH 5.3)

MC — Thu, 15 Jan 2015 16:06:34 GMT

Never mind... we just realized that the sentry.hive.testing.mode property had been set in the wrong place. It's working now!

Re: Sentry doesn't seem to work with LDAP (CDH 5.3)

MC — Thu, 15 Jan 2015 16:11:43 GMT

Before I close this post, here is the solution... Add the sentry.hive.testing.mode property to the "Hive Service Advanced Configuration Snippet (Safety Valve) for sentry-site.xml" under the Hive service.