Reply
Highlighted
New Contributor
Posts: 1
Registered: ‎03-22-2018

Beeline : Access denied to Hive

We obtain a hive ticket in Kerberos and connect to beeline successfully.

 

Once in beeline, we run: show roles to see Sentry roles but we get a “ ……… Access denied to hive”

 

In the log file it says that:

 

…………………..HadoopGroupsMappingService: unable to obtain group for hive

………………………………………………………

……………………………………

…………

 

How do I go around this issue. How to add a new admin user in Sentry or make the hive user an admin user in Sentry.

Expert Contributor
Posts: 133
Registered: ‎01-08-2018

Re: Beeline : Access denied to Hive

In general, admin groups are added in sentry's configuration -> https://www.cloudera.com/documentation/enterprise/latest/topics/sg_sentry_service_config.html#concep...

 

Your issue is that hive user is not configured properly. Did you manually created users?

If you run "id hive" in your system, the user hive should belong to group hive. If you fix this, probably you should be able to set sentry rules as hive, because by default hive group should be defined as admin group.

 

If you are not using Cloudera Manager, then set "sentry.service.admin.group"