Where can I configure sentry policies in cloudera manager 5.1?

[#1]

When I was trying to selecting "Enable Sentry Authorization using Policy Files" and click save in Hive configuration, cloudera manager shows:

• Sentry authorization cannot be enabled using both policy files and Sentry service at the same time.

Because I used both sentry service and policy based sentry here. Does anyone knows where can I configure policies or its counterparts with cloudera manager? Does the new sentry service still maintain sentry-provider.ini? Thanks!

[#2 · Accepted solution]

Hi,

Sentry service stores policy information in a relational database, whereas the Policy File implementation uses a file. You should never use both at the same time as that would be redundant. When using Sentry service, you issue grants and revokes via the HiveServer2 client beeline.

The descriptions for the Sentry configuration in the CM UI have links to documentation explaining the usage, which should answer all of your questions.

Thanks,
Darren