Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

hbase-indexer-sentry usage

Highlighted

hbase-indexer-sentry usage

Explorer

I'm setting up Lily NRT indexing for HBase, per: 

https://www.cloudera.com/documentation/enterprise/6/6.1/topics/search_hbase_indexer_security.html

 

On CDH6.1.1. 

 

The cluster has kerberos enabled, so I've been through the security steps - we don't have any existing sentry policy files since it's new. This isn't really my area so the usage of hbase-indexer-sentry isn't the clearest to me, I assume my objective is to create a new role:

 

hbase-indexer-sentry -cr index_admin 

Then I have existing AD groups I would want to associate with this role, say

hbase-indexer-sentry -agr cloudera_solr_admins

Obviously these commands fail because I'm not specifying which service this is used for.

 

A couple questions:

(1) Do I need to perform the above (assuming I'm a member of cloudera_solr_admins, in this case) in order to be able to create an indexer? If I try to create an indexer at the moment I get a 401 response.

(2) What is the service in this context? i.e., what am I passing to -s...