Reply
Highlighted
Expert Contributor
Posts: 66
Registered: ‎12-24-2015

FAILED: InvalidConfigurationException hive.server2.authentication can't be none in non-testing mode

[ Edited ]

After applying below setting over Cloudera Manger.

 

Securing the Hive Metastore

It's important that the Hive metastore be secured. If you want to override the Kerberos prerequisite for the Hive metastore, set the sentry.hive.testing.mode property totrue to allow Sentry to work with weaker authentication mechanisms. Add the following property to the HiveServer2 and Hive metastore's sentry-site.xml:
<property>
  <name>sentry.hive.testing.mode</name>
  <value>true</value>
</property>

 

I am getting below error :

 

[HiveServer2-Handler-Pool: Thread-40]: FAILED: InvalidConfigurationException hive.server2.authentication can't be none in non-testing mode
org.apache.sentry.binding.hive.conf.InvalidConfigurationException: hive.server2.authentication can't be none in non-testing mode
at org.apache.sentry.binding.hive.authz.HiveAuthzBinding.validateHiveServer2Config(HiveAuthzBinding.java:167)
at org.apache.sentry.binding.hive.authz.HiveAuthzBinding.validateHiveConfig(HiveAuthzBinding.java:135)
at org.apache.sentry.binding.hive.authz.HiveAuthzBinding.<init>(HiveAuthzBinding.java:83)
at org.apache.sentry.binding.hive.authz.HiveAuthzBinding.<init>(HiveAuthzBinding.java:79)
at org.apache.sentry.binding.hive.HiveAuthzBindingHook.<init>(HiveAuthzBindingHook.java:109)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
at java.lang.Class.newInstance(Class.java:374)
at org.apache.hadoop.hive.ql.hooks.HookUtils.getHooks(HookUtils.java:60)

 

 

 

Link : http://www.cloudera.com/content/www/en-us/documentation/enterprise/latest/topics/sg_sentry_service_c...

 

 

I am not sure what i am missing .

 

 

Regards,

Kartik

 

Cloudera Employee
Posts: 10
Registered: ‎12-30-2015

Re: FAILED: InvalidConfigurationException hive.server2.authentication can't be none in non-testing m

If you go to Hive service -> Instances tab -> click HiveServer2, then click on Processes.  Do you see the advanced configuration snippet for sentry.hive.testing.mode in your sentry-site.xml?  If you don't, you don't have the property set right.  Make sure you put the configuration in the Service-Wide advanced configuration snippet for sentry-site.xml.  This effectively puts it into both HiveServer2 and Hive Metastore Server role configurations.

Expert Contributor
Posts: 142
Registered: ‎07-17-2017

Re: FAILED: InvalidConfigurationException hive.server2.authentication can't be none in non-testing m