user hive/host1 is not allowed to impersonate sentry/host2

[#1]

Hello,

In my kerberized and Sentry-protected CDH, I started getting the following errors on hive metastore:

Caused by: org.apache.hadoop.security.authorize.AuthorizationException: 
User: hive/[email protected] is not allowed to 
impersonate sentry/[email protected]

In core-site.xml I have:

hadoop.proxyuser.hive.groups=*
hadoop.proxyuser.hive.users=*

The error started after I was playing around with LDAP integration, though I rollback my configurations to the previous no-LDAP state. I am trying to figure out what I missed.

[#2 · Accepted solution]

core-site.xml had empty values not *.

No issue.