Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

submit a sql with beeline or hue, the job submiter will be 'hive'

avatar
Contributor

I had login beeline/hue with the user 'test'.

 

Then I submit a sql,on the yarn web,I can see the job submiter is 'hive',why?

Obviously the user must be 'test'.

Is there a configuration I had missed?

(cdh5.2.0)

 

rube

1 ACCEPTED SOLUTION

avatar
Super Guru
I think that the whole point of Sentry, Hive owns the data and guarantees
fine grain permissions to the user submitting jobs. As Hive needs to own
the data, the jobs are submitted as Hive.

View solution in original post

3 REPLIES 3

avatar
Super Guru
You probably don't have HiveServer2 Impersonation
(hive.server2.enable.doAs) turned on

avatar
Contributor

I have used sentry service. If I turn this on,It will be an error:

 

1 validation error.

  • Hive Impersonation is enabled for Hive Server2 role 'hiveserver2 (slave-73)'. Hive Impersonation should be disabled to enable Hive authorization using Sentry

avatar
Super Guru
I think that the whole point of Sentry, Hive owns the data and guarantees
fine grain permissions to the user submitting jobs. As Hive needs to own
the data, the jobs are submitted as Hive.