Hello @Vipin Rathor , thank you sooo much. Your hint with the FQDN did the trick. After putting the FQDN in the curl command, it works nice! ... View more

Hello @mbigelow , many thanks for your reply. Here the output :     ## as user cloudera-scm: -bash-4.2$ klist -ef Ticket cache: FILE:/tmp/krb5cc_995 Default principal: cloudera-scm@realm.demo Valid starting Expires Service principal 04/28/2017 06:08:22 04/29/2017 06:08:22 krbtgt/realm.demo@realm.demo renew until 05/05/2017 06:08:22, Flags: FRI Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96     any ideas ? ... View more

Hi, although @Lester Martin and @Sunile Manjee answered perfectly, just a minor addition. If you want to assign privileges to a _group_ instead of single user, then also use '@'-prefix, like e.g.: grant '@admingroup', 'RWXC', '@my_ns' ... View more

Hello @saranvisa , thanks for replying quickly. I am not testing Sentry-HDFS permissions, I am working on Sentry-SOLR. The scenario I described relates to permissions of querying a SOLR collection, not accessing HDFS files.   - Kerberos is enabled - SOLR collection has been created - Sentry roles have been created - Linux groups have been mapped to Sentry roles - Privileges to access the SOLR collection has been granted via ```solrctl sentry .. ``` commandline call   available sentry roles: [cloudera@quickstart hue]$ solrctl sentry --list-roles demo-update sentry_admin demo-query ...and privileges: [cloudera@quickstart hue]$ solrctl sentry --list-privileges demo-query Collection=acltest->action=query [cloudera@quickstart hue]$ solrctl sentry --list-privileges demo-update Collection=acltest->action=update [cloudera@quickstart hue]$     OS user 'testuser' is **NOT** part of any of those groups, but he can nevertheless query the collection 'acltest'   [testuser@quickstart ~]$ curl --negotiate -u : 'http://quickstart.cloudera:8983/solr/acltest/select?q=*' <?xml version="1.0" encoding="UTF-8"?> <response> <lst name="responseHeader"><int name="status">0</int><int name="QTime">0</int><lst name="params"><str name="q">*</str></lst></lst><result name="response" numFound="2" start="0"><doc><int name="my_id">1</int><long name="my_somecode">55508</long><str name="cust_plz">0815</str><str name="cust_hausnr">111</str><str name="cust_strasse">hauptstr</str><str name="cust_ort">nirvana</str><str name="bank_account">746757583873</str><long name="_version_">1564414881528020992</long></doc><doc><int name="my_id">2</int><long name="my_somecode">22208</long><str name="cust_plz">4711</str><str name="cust_hausnr">666</str><str name="cust_strasse">highway-to-hell</str><str name="cust_ort">nirvana</str><str name="bank_account">9958575488</str><long name="_version_">1564414881580449792</long></doc></result> </response>   I now also tried to set the privileges via Hue=>Security plugin, but this does not work. I am able to define the role and privilege, but after clicking the blue "Update" button I just see in the top right corner the hint "Privileges has been updated", but in the overview there is no privilege displayed for that collection.....strange....           ... View more