that sounds very odd , so if the table has 1 billon rows and someone asks me to tell which columns it has in a particular column family I have to dump the whole billon rows ? there has to be some other way ... View more

this did the trick .. [root@hadoop1 ~]# klist -kte /etc/security/keytabs/hbase.headless.keytab Keytab name: FILE:/etc/security/keytabs/hbase.headless.keytab KVNO Timestamp Principal ---- ----------------- -------------------------------------------------------- 1 11/30/16 14:40:25 hbase-fdot_hadoop@TOLLS.DOT.STATE.FL.US (arcfour-hmac) 1 11/30/16 14:40:25 hbase-fdot_hadoop@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1) 1 11/30/16 14:40:25 hbase-fdot_hadoop@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96) 1 11/30/16 14:40:25 hbase-fdot_hadoop@TOLLS.DOT.STATE.FL.US (des-cbc-md5) 1 11/30/16 14:40:25 hbase-fdot_hadoop@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96) kinit -kt /etc/security/keytabs/hbase.headless.keytab hbase-fdot_hadoop hbase(main):002:0> grant 'sami', 'RWXCA' 0 row(s) in 0.4040 seconds hbase(main):003:0> exit [root@hadoop1 ~]# ... View more

I tried to add privileges from HBASE its not letting me . hbase(main):003:0> [hdfs@hadoop1 ~]$ kinit hive Password for hive@abc.com: [hdfs@hadoop1 ~]$ [hdfs@hadoop1 ~]$ [hdfs@hadoop1 ~]$ hbase shell HBase Shell; enter 'help<RETURN>' for list of supported commands. Type "exit<RETURN>" to leave the HBase Shell Version 1.1.2.2.5.0.0-1245, r53538b8ab6749cbb6fdc0fe448b89aa82495fb3f, Fri Aug 26 01:32:27 UTC 2016 hbase(main):001:0> whoami hive@abc.com (auth:KERBEROS) groups: hadoop hbase(main):002:0> grant 'sami', 'RWXCA' ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions (user=hive@abc.com, scope=GLOBAL, action=ADMIN) at org.apache.hadoop.hbase.security.access.AccessController.requirePermission(AccessController.java:438) at org.apache.hadoop.hbase.security.access.AccessController.grant(AccessController.java:2216) at org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos$AccessControlService$1.grant(AccessControlProtos.java:9933) at org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos$AccessControlService.callMethod(AccessControlProtos.java:10097) at org.apache.hadoop.hbase.regionserver.HRegion.execService(HRegion.java:7716) at org.apache.hadoop.hbase.regionserver.RSRpcServices.execServiceOnRegion(RSRpcServices.java:1895) at org.apache.hadoop.hbase.regionserver.RSRpcServices.execService(RSRpcServices.java:1877) at org.apache.hadoop.hbase.protobuf.generated.ClientProtos$ClientService$2.callBlockingMethod(ClientProtos.java:32299) at org.apache.hadoop.hbase.ipc.RpcServer.call(RpcServer.java:2127) at org.apache.hadoop.hbase.ipc.CallRunner.run(CallRunner.java:107) at org.apache.hadoop.hbase.ipc.RpcExecutor.consumerLoop(RpcExecutor.java:133) at org.apache.hadoop.hbase.ipc.RpcExecutor$1.run(RpcExecutor.java:108) at java.lang.Thread.run(Thread.java:745) Here is some help for this command: Grant users specific rights. Syntax : grant <user> <permissions> [<@namespace> [<table> [<column family> [<column qualifier>]]] permissions is either zero or more letters from the set "RWXCA". READ('R'), WRITE('W'), EXEC('X'), CREATE('C'), ADMIN('A') Note: Groups and users are granted access in the same way, but groups are prefixed with an '@' character. In the same way, tables and namespaces are specified, but namespaces are prefixed with an '@' character. For example: ... View more

can you please give me an example on how ? also whats the role of HBASE ranger plugin if without it being enabled we still need to grant privileges? ... View more

but ranger plugin for HBASE is not enabled , why Ranger permissions to be set then ? and the HBASE security tab in Ranger is disabled for this reason . its not letting me set any privileges . ... View more

yes that did the trick , but its a different command than I was using ,so how does this command works? so far I am using "kinit <username>" to get tickets and when I do this it asks for a password but your command did not ask for a password , why ? ... View more