Member since
09-13-2015
35
Posts
47
Kudos Received
3
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
969 | 06-05-2017 06:38 PM | |
3443 | 04-10-2017 06:01 AM | |
5202 | 03-23-2017 06:22 PM |
07-09-2018
06:46 PM
@Anjali Shevadkar It is not mandatory, but the recommended config is to use Ranger in a secure cluster
... View more
07-06-2018
07:17 PM
@Anjali Shevadkar
Is your cluster kerberized. If so, are you using the relevant kerberos ticket for the user, please confirm
... View more
06-29-2017
05:59 PM
3 Kudos
@Saurab Dahal The replication factor is already set to 3 for the file you are trying to append data to. Even if the config value is changed, it gets into effect for new files. Please check the replication factor for a file created after the config value change.
... View more
06-28-2017
06:45 PM
2 Kudos
Thanks Surya. It worked.
... View more
06-28-2017
06:35 PM
3 Kudos
Hi, I have a cluster with ranger enabled and trying to connect to hive using hive-spark beeline Command: /usr/hdp/current/spark2-client/bin/beeline -n testuser1 -p testuser1 -u "jdbc:hive2://<host:<port>/;principal=hive/_HOST@EXAMPLE.COM" Output: Connecting to jdbc:hive2://<host>:<port>/;principal=hive/_HOST@EXAMPLE.COM
INFO Utils: Supplied authorities: <host>:<port>
INFO Utils: Resolved authority: <host>:<port>
WARN NativeCodeLoader: Unable to load native-hadoop library for your platform... using builtin-java classes where applicable
INFO HiveConnection: Will try to open client transport with JDBC Uri: jdbc:hive2://<host>:<port>/;principal=hive/_HOST@EXAMPLE.COM
Error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [testuser1] does not have [USE] privilege on [Unknown resource!!] (state=42000,code=40000)
Beeline version 1.2.1.spark2.hdp.1 by Apache Hive
0: jdbc:hive2://<host>- (closed)> The same works fine for HSI client /usr/hdp/current/hive-client/bin/beeline -n testuser1 -p testuser1 -u "jdbc:hive2://<host>:<port>;principal=hive/_HOST@EXAMPLE.COM"
Connecting to jdbc:hive2://<host>:<port>;principal=hive/_HOST@EXAMPLE.COM
Connected to: Apache Hive (version 2.1.0.2.6.1.0-111)
Driver: Hive JDBC (version 1.2.1000.2.6.1.0-111)
Transaction isolation: TRANSACTION_REPEATABLE_READ
Beeline version 1.2.1000.2.6.1.0-111 by Apache Hive
0: jdbc:hive2://<host>->
Could someone help with identifying the reason for failure for hive-spark beeline. It says the user doesnot have use privilege on unknown resource. Thanks
... View more
Labels:
- Labels:
-
Apache Spark
06-11-2017
06:42 PM
1 Kudo
@Sami Ahmad Ranger external url is the ranger admin host address. For example, http://<ranger_host>:6080
... View more
06-05-2017
06:38 PM
1 Kudo
@subash sharma Creation of masking policies for tags is not supported in HDP 2.6. You may check https://issues.apache.org/jira/browse/RANGER-1168 to see the details on adding data masking for tag based policies.
... View more
04-10-2017
06:01 AM
4 Kudos
@Edgar Orendain Please refer the following wiki page https://cwiki.apache.org/confluence/display/RANGER/Support+for+%24username+variable "keyadmin" is a ranger internal user who has the ability to manage KMS related operations. Internal users are not synced from any external source, these are ranger specific users (and are available in Ranger db)
... View more
03-28-2017
06:59 PM
3 Kudos
@ARUN HDFS acls are used as fallback when no ranger policy exist for any given HDFS resource. You may turn off xasecure.add-hadoop-authorization flag under HDFS configs to have only ranger acls.
... View more
03-24-2017
09:03 AM
1 Kudo
@Nhan Nguyen Please check if the replace function directly works on hive side. The replace function is supported as of Hive1.3.0 and 2.1.0 https://issues.apache.org/jira/browse/HIVE-13063 If you think the answer has solved your query, please accept the answer. Thanks
... View more