Member since
08-28-2017
5
Posts
0
Kudos Received
0
Solutions
06-25-2018
09:41 AM
Hi guys, I set up PAM authentication for Hive and I configured PAM to read OS users. So, from beeline I am able to connect using valid credentials. The problem is when I try to connect to Hive View from Ambari. It asks me for Hive passwords and I enter the correct password, but it doesn't work. In order to give you a brief overview of my config, I have: hive.server2.authentication = PAM and: hive.server2.authentication.pam.services=login,sshd And, when I try to open Hive View from Ambari, I get the following error: Service Hive check failed:
org.apache.ambari.view.hive2.internal.ConnectionException: Cannot open a hive connection with connect string jdbc:hive2://<host1>:2181,<host2>:2181,<host3>:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2-hive2;hive.server2.proxy.user=test_user
.
.
.
Caused by: java.sql.SQLException: Could not open client transport for any of the Server URI's in ZooKeeper: Peer indicated failure: Error validating the login Could you help me? Thanks in advance!!!
... View more
Labels:
06-15-2018
08:14 AM
But I dont have Kerberos or LDAP. Regarding Ranger policies, that's exactly what I have, but still can perform actions on Hiveserver2 using the username and no password (or wrong password, doesnt matter). I think I am missing something in Ranger configuration. I mean: when I limit user permission for Hive (only Select permission in one DB). I can Select on that DB, but with no password. So, I dont know if this is Ranger or Hive issue.
... View more
06-14-2018
05:01 PM
Hi guys, When I try to connect to Hiveserver2 via beeline: beeline> !connect jdbc:hive2://<host>:2181,<host>:2181,<host>:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2 I have to enter my credentials: Enter username for jdbc...: my_username
Enter password for jdbc...: If I leave password field empty, the connection is established as well. So, the thing is: I have set up Ranger permission to Hive for different external users, but they can connect to Hive without any password. What can I do?
... View more
Labels:
08-30-2017
10:55 AM
Yes, it is. You can use the following Rest call: GET
http://<atlas-server-host:port>/api/atlas/discovery/search/dsl?query=%60Catalog.Marketing.Customers%60
The JSON Response will be like this: {
"requestId": string,
"query": trait_name_within_backticks,
"queryType": "dsl",
"count": int,
"results": [{
"$typeName$": "__tempQueryResultStruct...",
"instanceInfo": {
"$typeName$": "__IdType",
"guid": guid of entity associated to trait or term,
"typeName": type of entity associated to trait or term
},
"traitDetails": null
}, ....],
"dataType": {
"typeName": "__tempQueryResultStruct...",
"typeDescription": null,
"attributeDefinitions": [{
"name": "traitDetails",
"dataTypeName": trait or term name,
"multiplicity": {
"lower": 0,
"upper": 1,
"isUnique": false
},
"isComposite": false,
"isUnique": false,
"isIndexable": true,
"reverseAttributeName": null
}, {
"name": "instanceInfo",
"dataTypeName": "__IdType",
"multiplicity": {
"lower": 0,
"upper": 1,
"isUnique": false
},
"isComposite": false,
"isUnique": false,
"isIndexable": true,
"reverseAttributeName": null
}]
}
} So, you're getting the GUID of the entities associated with your trait. Best Regards, Ivan Diaz.
... View more
08-29-2017
03:03 PM
Hi Subash, I've tried to perform a search just like yours and you're right: it's not showing $traits$ key. I tried something that worked for me: in your Rest End Point change the %22 to %27, just like this: atlas_hostname + '/api/atlas/discovery/search/dsl?query=hive_table+where+db.name%3D%27'+ database + '%27&limit=10000' I think it'll work. Best Regards, Ivan.
... View more