Support Questions
Find answers, ask questions, and share your expertise

Using Hive Built-In UDF whith sentry CM 5.0.1

New Contributor

Hi,

 

After enabling sentry with kerberos some of our queries stop working with the following error

should we copy the hive-exec.jar to our auxlibs directory and add it to the sentry whitelist?

as anyone hit this issue?

 

FAILED: SemanticException No valid privileges
org.apache.hadoop.hive.ql.parse.SemanticException: No valid privileges
	at org.apache.sentry.binding.hive.HiveAuthzBindingHook.postAnalyze(HiveAuthzBindingHook.java:291)
	at org.apache.hadoop.hive.ql.Driver.compile(Driver.java:457)
	at org.apache.hadoop.hive.ql.Driver.compile(Driver.java:352)
	at org.apache.hadoop.hive.ql.Driver.compileInternal(Driver.java:995)
	at org.apache.hadoop.hive.ql.Driver.compileAndRespond(Driver.java:988)
	at org.apache.hive.service.cli.operation.SQLOperation.prepare(SQLOperation.java:98)
	at org.apache.hive.service.cli.operation.SQLOperation.run(SQLOperation.java:163)
	at org.apache.hive.service.cli.session.HiveSessionImpl.runOperationWithLogCapture(HiveSessionImpl.java:514)
	at org.apache.hive.service.cli.session.HiveSessionImpl.executeStatementInternal(HiveSessionImpl.java:222)
	at org.apache.hive.service.cli.session.HiveSessionImpl.executeStatement(HiveSessionImpl.java:204)
	at org.apache.hive.service.cli.CLIService.executeStatement(CLIService.java:168)
	at org.apache.hive.service.cli.thrift.ThriftCLIService.ExecuteStatement(ThriftCLIService.java:316)
	at org.apache.hive.service.cli.thrift.TCLIService$Processor$ExecuteStatement.getResult(TCLIService.java:1373)
	at org.apache.hive.service.cli.thrift.TCLIService$Processor$ExecuteStatement.getResult(TCLIService.java:1358)
	at org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39)
	at org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39)
	at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingProcessor.process(HadoopThriftAuthBridge20S.java:608)
	at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:244)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
	at java.lang.Thread.run(Thread.java:744)
Caused by: org.apache.hadoop.hive.ql.metadata.AuthorizationException: The UDF UDFToInteger is not found in the list of allowed UDFs
	at org.apache.sentry.binding.hive.HiveAuthzBindingHook.checkUDFWhiteList(HiveAuthzBindingHook.java:476)
	at org.apache.sentry.binding.hive.HiveAuthzBindingHook.authorizeWithHiveBindings(HiveAuthzBindingHook.java:385)
	at org.apache.sentry.binding.hive.HiveAuthzBindingHook.postAnalyze(HiveAuthzBindingHook.java:283)
	... 20 more

 

 

 

Regards

 

0 REPLIES 0