Reply
Highlighted
Expert Contributor
Posts: 82
Registered: ‎02-24-2016

Disable Hive CLI

According to the Sentry documentation " When Sentry is enabled, you must use Beeline to execute Hive queries. Hive CLI is not supported with Sentry and must be disabled". Is there any offcial way to disable Hive CLI.

Cloudera Employee
Posts: 46
Registered: ‎11-04-2015

Re: Disable Hive CLI

Hi,

 

Locking down hive CLI can be done with setting hadoop.proxyuser.hive.groups to a value which restricts hive access to specific groups only - and not to everyone ( * - asterisk for everyone).

 

http://www.cloudera.com/documentation/enterprise/latest/topics/cdh_sg_hiveserver2_security.html#conc...

 

Regards

 Miklos Szurap

Customer Operations Engineer

Expert Contributor
Posts: 82
Registered: ‎02-24-2016

Re: Disable Hive CLI

I am using Sentry, so when i enable `hive.server2.enable.impersonation` it's showing "Hive Impersonation is enabled for Hive Server2 role 'HiveServer2 '. Hive Impersonation should be disabled to enable Hive authorization using Sentry"
Cloudera Employee
Posts: 46
Registered: ‎11-04-2015

Re: Disable Hive CLI

That's correct, Hive Impersonation should be disabled in Hive when using Sentry. Could you achieve the desired results that way?