Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Ranger UI for Hive Plug in Auto complete of Tables and Columns does not work.

Ranger UI for Hive Plug in Auto complete of Tables and Columns does not work.

I read the following https://community.hortonworks.com/questions/432/permissions-necessary-for-the-user-required-to-con.h....

However for the Hive Plug in, in the Ranger UI the Autocomplete does not work. Which user handles the lookup for databases and tables for the Hive Plug in, in the Ranger UI? Note, the Hive Plug in, and the authorization works, but the autocomplete of database and tables and columns does not work....

1598-screen-shot-2016-01-27-at-125904-pm.png

Is it the Ranger repository config user the one that does the lookup for tables and columns to get the autocomplete to work in Ranger UI?

Is the Ranger repository config user only a database user?

What if someone used cluster prefixes for non-local system users upon creation of cluster e.g. <cluster>-ambari-qa and <cluster<-hive? Should the Ranger repository config user still be "hive" as it is not an actual system account BUT the Policy User for Hive be <cluster>-ambari-qa? Trying to make sense of all of this and why the Hive autocomplete does not work.

4 REPLIES 4

Re: Ranger UI for Hive Plug in Auto complete of Tables and Columns does not work.

Expert Contributor

Lookup is handled by the user which is configured in the Hive Repository in Ranger UI, Also check that user has the policy to do the hive query. It has to be hadoop user for the user to get authorized. In secure cluster it has to be principal with password from kdc i.e. hive@EXAMPLE.COM

Re: Ranger UI for Hive Plug in Auto complete of Tables and Columns does not work.

Mentor

@Ancil McBarnett what was the solution?

Highlighted

Re: Ranger UI for Hive Plug in Auto complete of Tables and Columns does not work.

Resolution: I used rangeradmin user instead... that existed and that worked.. so I will make a note that clusters with non local users and with cluster prefixes will have this issue...

The Lookup is done by the Repository Configuration User. This user must be created separated as a local or AD user in a non secured cluster, and given a password. Eg. rangeradmin. In a secured cluster created a user principal with a password. A key tab does not work. Use that principal as the configuration user. e.g. rangeradmin@hostname

Please also note that if this user creation step is done AFTER enabling hive plugin (or ANY plugins) from ambari (i.e. the repo is already created and exists in ranger), making changes in Ambari will NOT work, so repo config user and password NEED to be updated in Ranger Admin UI directly. This is because once the repo is created in ranger, Ambari won't try to update it.

Re: Ranger UI for Hive Plug in Auto complete of Tables and Columns does not work.

New Contributor

Did you require the Local/AD user to have any specific groups? @Ancil McBarnett

Don't have an account?
Coming from Hortonworks? Activate your account here