Support Questions
Find answers, ask questions, and share your expertise

Does every user that submits Hive Action needs to have write permission to /user/yarn?

Guru

Does every user that submits Hive Action needs to have write permission to /user/yarn?

Because jobs were failing with below error and once I have granted access to user on /user/yarn dir then it got resolved so I just want to know the root cause and does really I need to grant access to each user.

Caused by: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.AccessControlException): Permission denied: user=hdpbatch, access=EXECUTE, inode="/user/yarn/.hiveJars":yarn:hdfs:drwx------

3 REPLIES 3

Mentor
@Saurabh Kumar

when you say hive action is that for oozie or just in general? I would consult this document for proper permissions http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_installing_manually_book/content/rpm_vali... this is a manual install guide, here they walk you through all permissions explicitly, in automated install guide, Ambari handles all permissions. For Oozie, I would look at my example called sqoopshell where I escalate my sqoop user to root or any other named user but yarn user as I was having the same issues with yarn. https://github.com/dbist/oozie/tree/master/apps/sqoopshell

Guru

@Artem Ervits: Yes , it is hive action in oozie. I also read your github post and looks similar issue.

But I could not understand why we need to give sudo permssion to all user to sudo sto yarn. I feel it is not not good.

And also not that before upgrade(i.e on hdp 2.2) it was running fine.

Mentor

I would definitely like to learn a new way, if you find an alternative, please post here