Reply
Highlighted
Explorer
Posts: 10
Registered: ‎10-15-2013
Accepted Solution

Where can I configure sentry policies in cloudera manager 5.1?

When I was trying to selecting "Enable Sentry Authorization using Policy Files" and click save in Hive configuration, cloudera manager shows:

  • Sentry authorization cannot be enabled using both policy files and Sentry service at the same time.

Because I used both sentry service and policy based sentry here. Does anyone knows where can I configure policies or its counterparts with cloudera manager? Does the new sentry service still maintain sentry-provider.ini? Thanks!

Innovation Never Die
Cloudera Employee
Posts: 509
Registered: ‎07-30-2013

Re: Where can I configure sentry policies in cloudera manager 5.1?

Hi,

Sentry service stores policy information in a relational database, whereas the Policy File implementation uses a file. You should never use both at the same time as that would be redundant. When using Sentry service, you issue grants and revokes via the HiveServer2 client beeline.

The descriptions for the Sentry configuration in the CM UI have links to documentation explaining the usage, which should answer all of your questions.

Thanks,
Darren