Options
- Subscribe to RSS Feed
- Mark as New
- Mark as Read
- Bookmark
- Subscribe
- Printer Friendly Page
- Report Inappropriate Content
Super Guru
Created on 12-23-2016 05:34 AM
SYMPTOM: Ambari smoke test fails for hbase service. Below is the current scenario -
- Ranger is installed in the cluster
- HBase policy has been enabled
- ambari-qa user has the privileges correctly defined in the HBase policy
ERROR:
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions (user=ambari-qa, scope=default, params=[namespace=default,table=default:ambarismoketest,family=family],action=CREATE) 2015-10-27 09:52:03,342 ERROR [main] client.AsyncProcess: Failed to get region location org.apache.hadoop.hbase.TableNotFoundException: Table 'ambarismoketest' was not found, got: XXXXX01.
ROOT CAUSE:
If the Ranger co-processor is not correctly defined in the HBase configuration, the smoke test from Ambari would fail. Any table creation as non-hbase user could also fail.
RESOLUTION:
Verify the Ranger configuration for HBase. Ensure that the following properties are set correctly and that the co-processors include Ranger classes
hbase.coprocessor.master.classes hbase.coprocessor.region.classes hbase.coprocessor.regionserver.classes
All of the above should include org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor
hbase.security.authorization should be enabled i.e. set to true.
1,915 Views