- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Anonymous user requests to access on Hive HDFS files
- Labels:
-
Apache Hive
-
Apache Ranger
Created ‎05-04-2017 02:47 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi all, I installed Hive on HDP 2.5. I configured Ranger to allow access to the HDFS path for only hive user. In Audit Ranger, there is an Anonymous user who wants to use /tmp/hive on HDFS. What is the purpose of this Anonymous user ? Thank you for your advice.
Created ‎05-06-2017 10:21 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This link talks about anonymous user: https://cwiki.apache.org/confluence/display/Hive/Setting+Up+HiveServer2. Like @mqureshi stated, if the value for hive.server2.authentication is set to NONE then you'd see the anonymous user come into play.
Also, since you are using ranger, I'd guess that the whole point is to ensure that you have more fine grained control i.e., for each user so impersonation should also be enabled.
Created ‎05-05-2017 05:38 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
/tmp/hive is used for intermediate data by hive.
Created ‎05-05-2017 07:41 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What is the value of hive.server2.authentication in hive-site.xml? Default is NONE. Assuming this is none, and you don't specify a username, driver will default to using "anonymous" as the username.
Created ‎05-15-2017 08:53 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you for your reply. Indeed, the value is NONE.
Created ‎05-06-2017 10:21 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This link talks about anonymous user: https://cwiki.apache.org/confluence/display/Hive/Setting+Up+HiveServer2. Like @mqureshi stated, if the value for hive.server2.authentication is set to NONE then you'd see the anonymous user come into play.
Also, since you are using ranger, I'd guess that the whole point is to ensure that you have more fine grained control i.e., for each user so impersonation should also be enabled.
Created ‎05-15-2017 01:31 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you for your reply. I will try LDAP mode...
