Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Disable Hive CLI

Disable Hive CLI

Expert Contributor

According to the Sentry documentation " When Sentry is enabled, you must use Beeline to execute Hive queries. Hive CLI is not supported with Sentry and must be disabled". Is there any offcial way to disable Hive CLI.

3 REPLIES 3

Re: Disable Hive CLI

Contributor

Hi,

 

Locking down hive CLI can be done with setting hadoop.proxyuser.hive.groups to a value which restricts hive access to specific groups only - and not to everyone ( * - asterisk for everyone).

 

http://www.cloudera.com/documentation/enterprise/latest/topics/cdh_sg_hiveserver2_security.html#conc...

 

Regards

 Miklos Szurap

Customer Operations Engineer

Highlighted

Re: Disable Hive CLI

Expert Contributor
I am using Sentry, so when i enable `hive.server2.enable.impersonation` it's showing "Hive Impersonation is enabled for Hive Server2 role 'HiveServer2 '. Hive Impersonation should be disabled to enable Hive authorization using Sentry"

Re: Disable Hive CLI

Contributor

That's correct, Hive Impersonation should be disabled in Hive when using Sentry. Could you achieve the desired results that way?