Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

submit a sql with beeline or hue, the job submiter will be 'hive'

Solved Go to solution
Highlighted

submit a sql with beeline or hue, the job submiter will be 'hive'

Contributor

I had login beeline/hue with the user 'test'.

 

Then I submit a sql,on the yarn web,I can see the job submiter is 'hive',why?

Obviously the user must be 'test'.

Is there a configuration I had missed?

(cdh5.2.0)

 

rube

1 ACCEPTED SOLUTION

Accepted Solutions

Re: submit a sql with beeline or hue, the job submiter will be 'hive'

I think that the whole point of Sentry, Hive owns the data and guarantees
fine grain permissions to the user submitting jobs. As Hive needs to own
the data, the jobs are submitted as Hive.

3 REPLIES 3

Re: submit a sql with beeline or hue, the job submiter will be 'hive'

You probably don't have HiveServer2 Impersonation
(hive.server2.enable.doAs) turned on

Re: submit a sql with beeline or hue, the job submiter will be 'hive'

Contributor

I have used sentry service. If I turn this on,It will be an error:

 

1 validation error.

  • Hive Impersonation is enabled for Hive Server2 role 'hiveserver2 (slave-73)'. Hive Impersonation should be disabled to enable Hive authorization using Sentry

Re: submit a sql with beeline or hue, the job submiter will be 'hive'

I think that the whole point of Sentry, Hive owns the data and guarantees
fine grain permissions to the user submitting jobs. As Hive needs to own
the data, the jobs are submitted as Hive.

Don't have an account?
Coming from Hortonworks? Activate your account here