it happens because zookeeper-client command is connecting to the localhost so whenever you run it without specifying server on the node where zk server is installed , it works because localhost has zookeeper. but when you run it on other node then it does not work since there is no zookeeper installed on the localhost ... View more

Manish Gupta in case of hive ha also you can connect to HiveServer2 JDBC URL that contains zookeeper for eg: jdbc:hive2://<zk1>:2181,<zk2>2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2, this is explained very well in this doc , you can refer the same under Query Execution Path With ZooKeeper topic https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.6/bk_hadoop-ha/content/ha-hs2-service-discovery.html ... View more

can you please do kinit with hbase keytab and try the call to download the policies /service/plugins/secure/policies/download/venus_bigdata_hbase?lastKnownVersion=4&pluginId=hbaseRegional@bigdata9-venus_bigdata_hbase , just to confirm if everything is fine with keytab? do check one more thing if core-site.xml is present in /etc/ranger/admin/conf , if not just copy it there and restart the ranger admin ... View more

can you please see the screenshot and did you add the same properties, make sure you add the hbase user, if you have any custom hbase user then add that in these properites instead of hbase. and make sure you add it into your corresponding hbase repo venus_bigdata_hbase. after doing also if you see issue then just post the error if it is something different. ... View more

li zhen can you please confirm following: 1)which hdp version are you using ? 2) and is this a secure cluster? and if it is secure cluster then can you please check hbase repo ( bigdata6-venus_bigdata_hbase) on ranger UI, whether they are having following properties: policy.download.auth.users policy.grantrevoke.auth.users tag.download.auth.users if not please add these properties and add hbase user in its value please see the screenshot.: screen-shot-2017-02-28-at-31040-pm.png ... View more

there are following ways to check : 1) go to ranger audit page, click on plugin tab and see if there is entry for hbase , and check for update time it should be greater than the policy update time in admin audit log 2) or you can go to the hbase logs and check there should be no failure log for policy updation 3) check access audit log in /var/log/ranger/admin/ , there will be lot of logging reg, call sent to ranger admin and their response too, see if the response is 200/304 , if it is then policy refresh is working fine. ... View more

can you please check if hbase policy refresh is happening properly ... View more

it seems ambari infra is not installed , can you please install ambari_infra , start it and then restart the ranger , it should work then. ... View more