Member since
09-25-2015
93
Posts
66
Kudos Received
19
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
2482 | 10-12-2017 08:30 PM | |
1322 | 02-22-2017 12:19 AM | |
3155 | 02-01-2017 07:12 PM | |
2642 | 01-23-2017 11:58 PM | |
1407 | 12-06-2016 10:50 PM |
12-06-2016
10:50 PM
1 Kudo
Looking at the error Permission denied: user=hive, access=EXECUTE, inode="/apps/hive/warehouse":hdfs:hdfs:d--------- it is hdfs which is doing the Authorization check and not allowing. Do you have the policy for the use "hive" if not create one with read, write and execute permission as your hdfs level permission is 000
... View more
12-05-2016
07:15 PM
@Sami Ahmad Check these documents https://cwiki.apache.org/confluence/display/RANGER/Install+and+Configure+Solr+for+Ranger+Audits+-+Apache+Ranger+0.5 https://community.hortonworks.com/questions/69582/ranger-trying-to-use-solr.html#answer-69584
... View more
12-01-2016
11:04 PM
You need to enable the "Audit to solr" Refer the documentation https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.3/bk_security/content/using_apache_solr_for_ranger_audits.html
... View more
12-01-2016
02:00 AM
@Alexander Denissov may I know why you need to give authorization to just create database or schema alone? @Madhan Neethiraj Ping you on this to check if this is possible with current model. Please provide your input.
... View more
11-30-2016
11:25 PM
" Error: Client not found in Kerberos database while getting initial credentials" , is saying that principal 'hive' is not in the KDC , you need to create one to do a kinit with it.
... View more
11-30-2016
10:10 PM
Hive ranger plugin is only for HiveServer2 and not for Spark thrift Server. LLAP in HDP2.5 Tech preview would be another option for it.
... View more
11-28-2016
05:11 PM
2 Kudos
@Sriram Rangarajan Apache Ranger doesn't have a plugin for Hive Metastore as such. Ranger Plugin which is there is for HiveServer2. Please refer this doc for the supported plugins https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.2/bk_installing_manually_book/content/installing_ranger_plugins.html. If you are specifically looking for Ranger Hive Metastore plugin it is in design stage and refer this https://cwiki.apache.org/confluence/display/RANGER/Design+Proposal+for+Hive+Metastore+Plugin Regarding your questions Q 1) Test connection config for Hive Plugin Please refer https://community.hortonworks.com/questions/25115/ranger-hive-repository-test-connection-fails-in-ke.html Q 2 ) No, you wont be able to see those Roles, its not supported in Ranger hive Plugin. In Ranger UI when you create policy you will see the Privileges like "select", "insert", "update", "delete" that you can assign to the user in the form of Permissions. But if you are creating a role say for example "marketing" and "finance" these won't appear in Ranger UI. Q 3) No, HDFS plugin is not mandatory for hive plugin to work. Q 4) Solr in ranger is used for storing the audit for the authorization done, it not mandatory, although you won't be able to avail the auditing feature in the ranger.
... View more
11-16-2016
06:01 PM
@Manoj Dhake Audit is stored in solr and you can access it via solr apis e.g curl http://hostname:6083/solr/ranger_audits/query -d 'q=*:*&fq=reqUser:user1&wt=json&indent=on' curl --negotiate -vis -u : http://hostname:6083/solr/ranger_audits/query -d 'q=*%3A*&fq=repoType%3A8&sort=evtTime+desc&start=0&rows=25 Check out various solr apis for searching data
... View more
11-14-2016
06:51 AM
@Geetha Anne Is this error you get after you kinit with that principal and do run the storm command? Could you please post the storm command line?
... View more
11-11-2016
10:10 PM
Ranger doesn't have the details on the Job Id / App Id, hence not in audit logs
... View more