Support Questions

Find answers, ask questions, and share your expertise

Issue while granting user permission in Hbase

avatar
Rising Star

While granting user permission in HBase, it is failing with error. Recently we have de-kerberized and kerberized the Cluster.

"ERROR ArgumentError: DISABLED: Security features are not available"

1 ACCEPTED SOLUTION

avatar
Expert Contributor

@prsingh

That seems to be a bug, let's disable the ACL for ZK, by adding below in zookeeper-env.sh -Dzookeeper.skipACL=yes

1) Stop HBase 
2) Add -Dzookeeper.skipACL=yes in zookeeper-env.sh
export SERVER_JVMFLAGS="$SERVER_JVMFLAGS -Dzookeeper.skipACL=yes -Djava.security.auth.login.config={{zk_server_jaas_file}}" 
3) rmr /hbase-secure/table/hbase:acl 
4)revert back the change in step 2 -Dzookeeper.skipACL=yes 
5) Restart HBase again 
6) Try grant it should work now

View solution in original post

5 REPLIES 5

avatar
Expert Contributor

Hi @prsingh Are you able to create and list hbase tables? Also HBase UI is working fine? Can you also confirm if Ranger is enabled?

avatar
Rising Star

@nyadav

Yes, I'm able to create and list table from shell. Only issue is while granting permission.

Also Ranger is not enabled.

avatar
Expert Contributor

Thanks. Let's remove the acl znode from the ZK. Stop HBase services, and follow below steps

--login to zkcli (hbase zkcli)
-- rmr /hbase-secure/table/hbase:acl

avatar
Rising Star

@nyadav

I am getting below exception while running the below command,

rmr /hbase-secure/table/hbase:acl

Authentication is not valid : /hbase-secure/table/hbase:acl

avatar
Expert Contributor

@prsingh

That seems to be a bug, let's disable the ACL for ZK, by adding below in zookeeper-env.sh -Dzookeeper.skipACL=yes

1) Stop HBase 
2) Add -Dzookeeper.skipACL=yes in zookeeper-env.sh
export SERVER_JVMFLAGS="$SERVER_JVMFLAGS -Dzookeeper.skipACL=yes -Djava.security.auth.login.config={{zk_server_jaas_file}}" 
3) rmr /hbase-secure/table/hbase:acl 
4)revert back the change in step 2 -Dzookeeper.skipACL=yes 
5) Restart HBase again 
6) Try grant it should work now