Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]

Support Questions

Find answers, ask questions, and share your expertise
Announcements
Share your experience with Cloudera on G2 and get a $25 Amazon Gift card.
Hi, I'm CLEO! Something exciting is coming to the Community. Stay Tuned!

Ranger not Enable from HIVE

avatar
Explorer

When I enable the Ranger Service from HIVE in Cloudera Manager, it's getting an error like:

"Hive Impersonation is enabled for Hive Server2 role 'HiveServer2 (node1)'. Hive Impersonation should be disabled to enable Hive authorization using Ranger"

I want to access control from Ranger, But I cant 
Anybody, please help me.

1 ACCEPTED SOLUTION

avatar
Contributor

@sujonict07 

 

Can you try to disable the Hive impersonation?  If impersonation is enabled then all your hive queries will run as hive user and hive is super user for hive service which wouldn't be a good setup as you may want to restrict access to some users.

 

When you disable the hive impersonation then all queries will be submitted by the actual user and ranger will be able to provide the authorisation.

 

If it is enabled it doesn't make sense to use ranger.

 

Are you using CDP?

 

 

View solution in original post

1 REPLY 1

avatar
Contributor

@sujonict07 

 

Can you try to disable the Hive impersonation?  If impersonation is enabled then all your hive queries will run as hive user and hive is super user for hive service which wouldn't be a good setup as you may want to restrict access to some users.

 

When you disable the hive impersonation then all queries will be submitted by the actual user and ranger will be able to provide the authorisation.

 

If it is enabled it doesn't make sense to use ranger.

 

Are you using CDP?