as @Ramesh Mani mentioned, this seems to be more authorization related. For a quick fix, try to assigning read permissions the hdfs level (hadoop fs -chmod 755 /apps/hive/warehouse). For a more valid way of doing it, go to ranger and go to your hdfs policies and make sure you have the proper permissions for hive user to access the said directory. ... View more

Glad you have it worked out. Somehow I missed your last post stating that it is already installed, so my previous comment is OBE. ... View more

You need to enable the "Audit to solr" Refer the documentation https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.3/bk_security/content/using_apache_solr_for_ranger_audits.html ... View more

@Sami Ahmad: You have an HDFS policy which does not grant permissions to your user for viewing resources. In most of the components, this would boil down to access request being denied. However, in HDFS, if a Ranger policy does not grant access to a resource, native Hadoop privileges are checked as well. If HDFS grants user 'SAMI' access to resources, 'SAMI' will be able to access the same (inspite of Ranger policy not granting permission). You can check whether its Ranger policy responsible for your user being able to view resources or its native Hadoop ACLs through Audit page->Access tab. In screenshot, Policy ID is -- and also, Access Enforcer=hadoop-acl which means the user had access through native Hadoop ACL. None of the Ranger Hadoop policies are responsible for the Access/ Deny. Hope this helps. screen-shot-2017-02-08-at-104435-am.png ... View more

ok it worked , thanks a lot for your help . I had to create the ticket as user hive before starting beeline. [hive@hadoop1 ~]$ kinit hive Password for hive@TOLLS.DOT.STATE.FL.US: [hive@hadoop1 ~]$ klist Ticket cache: FILE:/tmp/krb5cc_1004 Default principal: hive@TOLLS.DOT.STATE.FL.US Valid starting Expires Service principal 11/30/16 18:52:14 12/01/16 18:52:14 krbtgt/TOLLS.DOT.STATE.FL.US@TOLLS.DOT.STATE.FL.US renew until 11/30/16 18:52:14 [hive@hadoop1 ~]$ beeline Beeline version 1.2.1000.2.5.0.0-1245 by Apache Hive beeline> !connect jdbc:hive2://hadoop2:10000/default;principal=hive/hadoop2@TOLLS.DOT.STATE.FL.US Connecting to jdbc:hive2://hadoop2:10000/default;principal=hive/hadoop2@TOLLS.DOT.STATE.FL.US Enter username for jdbc:hive2://hadoop2:10000/default;principal=hive/hadoop2@TOLLS.DOT.STATE.FL.US: hive Enter password for jdbc:hive2://hadoop2:10000/default;principal=hive/hadoop2@TOLLS.DOT.STATE.FL.US: ******* Connected to: Apache Hive (version 1.2.1000.2.5.0.0-1245) Driver: Hive JDBC (version 1.2.1000.2.5.0.0-1245) Transaction isolation: TRANSACTION_REPEATABLE_READ 0: jdbc:hive2://hadoop2:10000/default> ... View more

Sami Ahmad, i am also facing the same error and i have successfully installed the kerberos but while kerberos service check , it is giving me the same error as mentioned below and it is not resolved yet. ... View more

I installed HDP 2.6 and faced same problem while setting up kerberos. it's jar problem. Download policy jars for java: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html extract and place them in all the servers under /usr/java/jdk1.8.0_112/jre/lib/security/ . Then restart ambari server and restart krb5kds and kadmin services..now check your kdc connection will be pass ... View more

I would love to but its not showing the "accept as answer" option on your message . if the moderators are listening .. can you please accept Ayub's comment as answer ? ... View more