HUE with openLDAP, SENTRY enabled (OpenLdap installed on Secondary namenode)

[#1]

Hi,

CDH 5.9

I have installed openldap on the secondary namenode. I have enabled LDAP on HUE service. I'm able to sync LDAP users and groups to hue. I have also enabled sentry for hue. But, in the WebUI, i'm not able to see add role for any of the databases.

If I enable Sentry for Impala and try to create role in the query editor it says the user doesnot have permissions.

[#2]

What user do you have set as the Sentry 'god'?

sentry.service.admin.group

A user in this list or in a group in the list will be the only one that is able to create the initial roles until some delegation is granted.

[#3]

Hi,

I have added the group to the sentry admin group. I have logged in with the user which is part of the group. I'm able to see the permissions for the database, but, not able to see the add role and not able to add any permissions.