About paras

paras · ‎06-16-2020

@Mondi The group where the admin user is present should be added as the sentry admin group. This would also enable all other users in the group to act as sentry admins. If you want to se the user alone add it to the sentry admin groups as each user has a corresponding group entry created by the same name locally. Please ensure that the user and group exists on all nodes on the cluster.

paras · ‎06-16-2020

@Heri There seems to be missing sentry privileges on the hdfs URI Please refer below document to add the privileges. https://docs.cloudera.com/documentation/enterprise/latest/topics/sg_hive_sql.html#grant_privilege_on_uri Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.

paras · ‎06-05-2020

@Mondi You would still need to secure your cluster since any user can be impersonated in a non kerberised cluster. Refer https://blog.cloudera.com/how-to-secure-internet-exposed-apache-hadoop/ for more details on securing your cluster.

paras · ‎06-03-2020

@Mondi You should set yarn acls to restrict user access on YARN. Please check if dr.who is part of yarn admin acl configurations in YARN. Remove the user in this case and set dedicated user and groups for yarn access Refer https://docs.cloudera.com/documentation/enterprise/latest/topics/cm_mc_yarn_acl.html#concept_manage_yarn_ACLs Also refer https://community.cloudera.com/t5/Support-Questions/What-is-Dr-who-user-100s-of-yarn-jobs-are-getting-triggered/td-p/68026 Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.

paras · ‎06-03-2020

@vincentD Post CDH 6.0.x Hue does not work well with TCompactProtocol protocol based on HUE-2692 Please perform below steps for the fix: - CM --> Hbase --> Configuration --> Search for hbase.regionserver.thrift.compact - If it is checked, please UNCHECK it and restart Hbase service Retry Hbase browser access Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.

paras · ‎05-28-2020

@Mondi You can simply add the hue admin user to the group of sentry admin. Both the group and user should exist locally on cluster nodes and the hue admin user should be a part of this sentry admin group. Refer below document to set ACLs for the directories. https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cdh_sg_hdfs_ext_acls.html#xd_583c10bfdbd326ba--6eed2fb8-14349d04bee--76a9 Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.

paras · ‎05-27-2020

@Mondi The unable to obtain groups message indicates that the admin user on hue is not added to the cluster nodes. The user and its associated access groups should also be present on the cluster nodes. Please create the user if it does not exist, add it to the group of sentry admins and retry. What is the CDH version of your cluster? Are you able to modify ACLs of the HDFS directories from the command line using setfacl commands as the same user?

paras · ‎05-26-2020

@Mondi You cannot disable the download option in Hue per user. A more plausible way to not allow any specific path download would be to simply deny the user permission to read or write to the HDFS directory itself.

paras · ‎05-26-2020

@Mondi You can set the below Hue configuration in CM Hue Service → Configuration → Service-Wide → Advanced → Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini and add the following: [desktop] enable_download=false And then restart Hue.

paras · ‎05-26-2020

@Amey3 You cannot directly unzip the files in HDFS. You would have to uncompress the files on local and then place it on HDFS. You can use Hue which uses a shell action in oozie to automate this. The files are uncompressed in the local and then uploaded to HDFS. https://gethue.com/extract-archives-as-oozie-job/ Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.

Member Since	‎01-15-2019 11:41 PM
Last Visited
Posts	274
Kudos received	20

Cloudera Community

Re: Deny admin user/group from dropping hive table...

Re: Cloudera CDP 7.1.7 SP1 on Centos Stream 8

Re: cloudera embedded postgres db taking more memo...

Re: smpt configration changes have been done for C...

Re: Error when distributing Parcel file

Re: Can't create roles using Sentry in Hue Interfa...

Re: Strange error on Hive

Re: Dr.who virus in my YARN? how to resolve it usi...

Re: Dr.who virus in my YARN? how to resolve it usi...

Re: CDH 6.3.3: Hue - Hbase Api Error: TSocket read...

Re: Can't create roles using Sentry in Hue Interfa...

Re: Can't create roles using Sentry in Hue Interfa...

Re: how to disable the download button in hue inte...

Re: how to disable the download button in hue inte...

Re: How to uncompress a zip file which is stored i...