Created on 04-28-2020 01:43 AM - last edited on 04-28-2020 07:16 AM by VidyaSargur
I have Kerberos and sentry enabled for the cluster. Solr is also configured through sentry. The hue admin user is having all the access.
While testing out the collection creation and indexing using the hue indexes. I am getting the error 403. But I can see that collection being created, somehow the user which created the collection does not have access over the collection. Any other permission I need to add for this.
Created 04-28-2020 10:35 AM
Hi @Seeker90 ,
Thanks for reaching out to Cloudera community.
It looks like there is some missing permission and so could you please run the below commands as root user in hue node:
sudo -u solr solrctl sentry --list-roles
sudo -u solr solrctl sentry --list-privileges admin_role
and make sure you receive the below privileges when you run the below command:
[root@hue-test ~]# sudo -u solr solrctl sentry --list-privileges admin_role
Collection=*->action=*
Admin=*->action=*
Schema=*->action=*
Config=*->action=*
If you don't have the privileges, please use below command to add it:
sudo -u solr solrctl sentry --grant-privilege admin_role 'xxxx'
Hope this helps!
Li
Li Wang, Technical Solution Manager
Created 04-28-2020 10:35 AM
Hi @Seeker90 ,
Thanks for reaching out to Cloudera community.
It looks like there is some missing permission and so could you please run the below commands as root user in hue node:
sudo -u solr solrctl sentry --list-roles
sudo -u solr solrctl sentry --list-privileges admin_role
and make sure you receive the below privileges when you run the below command:
[root@hue-test ~]# sudo -u solr solrctl sentry --list-privileges admin_role
Collection=*->action=*
Admin=*->action=*
Schema=*->action=*
Config=*->action=*
If you don't have the privileges, please use below command to add it:
sudo -u solr solrctl sentry --grant-privilege admin_role 'xxxx'
Hope this helps!
Li
Li Wang, Technical Solution Manager