Stack Overflow
Stack Overflow

Questions tagged [apache-sentry]

Apache Sentry is a system for enforcing fine grained role based authorization to data and metadata stored on a Hadoop cluster.

Apache Sentry is a system for enforcing fine grained role based authorization to data and metadata stored on a Hadoop cluster.

Sentry currently integrates with the open source SQL query frameworks, Apache Hive and Apache Impala (incubating), and the open source search engine, Cloudera Search, and can also extend to other computing engines within the Hadoop ecosystem.

It was originally developed by Cloudera, but graduated in March 2016 to become a top-Level Apache project:

53 questions
1
vote
1 answer

Hive and Impala showing different roles for user with Sentry installed

I am running Cloudera 5.15, with Kerboros enabled on the cluster. Sentry is installed to configure user access to various tables/databases ...etc. Everything is installed and working fine for Hive, but not for Impala. I'm using Hue web UI for…
rb21220689
  • 23
  • 3
1
vote
0 answers

grant all on uri from spark

While running hiveContext.sql("grant all on uri 'file:/path/to/file' to role 'public'"); with Spark 1.6.2 I'm getting following error: org.apache.hadoop.hive.ql.parse.SemanticException: Hive authorization does not support the URI or SERVER objects.…
Aguinore
  • 91
  • 11
1
vote
0 answers

Sentry grants applied but not ACL working until a database is specified

I configured a admin role in Sentry with the next permissions: server=server1->action=ALL In Hive everything works: We can create objects, inserts, selects... But the HDFS folders haven't the correct ACL: hdfs dfs -getfacl…
amartira
  • 11
  • 2
1
vote
1 answer

Kafka on Cloudera - test=TOPIC_AUTHORIZATION_FAILED

We just upgraded from CDH 5.3.6 to 5.10.0, and started getting errors when trying to write to Kafka topics. We have the default settings on everything, no SSL or Kerberos authentication enabled. When use the console producer to write to one of my…
medloh
  • 941
  • 12
  • 33
1
vote
1 answer

Sentry in AWS EMR

We are planning to migrate from In home Cloudera Cluster to AWS EMR. The plan is to store data in S3 and process them using EMR Hive. We have lot of business users who access the data. Currently we use sentry for authorization What we use similary…
kalyan chakravarthy
  • 643
  • 10
  • 29
1
vote
0 answers

Enabling User Authorization on Hue AWS EMR

We have been struggling with configuring Hue/AWS EMR to use user/role based authorization on AWS EMR using Apache Sentry. we are following the cloudera's documentation…
Chirag
  • 335
  • 2
  • 3
  • 13
1
vote
1 answer

Working with Apache Sentry - Cloudera

I have configured Apache Sentry using Cloudera Manager in my machine, can anyone explain start up commands to work with Apache Sentry - Cloudera?
jyotsna
  • 11
  • 3
1
vote
0 answers

How to configure Sentry for work with Apache Solr

I downloaded the Apache Solr from github (https://github.com/apache/lucene-solr). Building the project using ANT and deploy .war file to TOMCAT7. Everything was successful. But now i want using Sentry for authorization in Apache Solr. I read a lot…
Yakiv Holovko
  • 421
  • 2
  • 5
  • 11
1
vote
1 answer

CDH5 Hue Hive — Beeswax Server: Error opening session: Failed to validate proxy privilage of hue for admin

I setup a Hadoop cluster with security by Kerberos, Hive has been enable Sentry. And I have problem with Hue - Hive (Beeswax) Editor. Hue can't load data, information from hive, in hive-server2 log : 2014-04-03 11:36:39,814 WARN …
kud
  • 36
  • 1
  • 3
0
votes
1 answer

Apache Sentry with Impala - Roles assigned to Groups in LDAP won't reflect

We do not use CDH stack as such but installed Impala, Sentry standalone. Hadoop core-site.xml has CompositeGroupsMapping with ShellBasedUnixGroupsMapping and LdapGroupsMapping. Impala is configured with Apache Sentry and LDAP. Any roles assigned to…
Saravanan
  • 21
  • 3
0
votes
0 answers

How to use Apache Sentry Java Client API & is there a user guide documentation?

I am trying to operate Sentry in our CDH cluster using its Java Client API. Since I haven't found any related documentation about this (very little useful information on its official site), I just guess and write. Now some exception came up and I…
iamabug
  • 306
  • 4
  • 11
0
votes
1 answer

Access based on Column value in Apache Sentry

I know we have Column level access in Apache Sentry. But is it possible to provide Access based on Column value also rather than just column ? Or Is creating a View the better and only option here ?
Invictus
  • 4,028
  • 10
  • 50
  • 80
0
votes
0 answers

can not load sentry conf while use beeline to connect to spark thift server

all.I have try to use beeline to connect to Spark Thrift Server,and the data is on hive.So for security,i want to use sentry to do autherization for different user when they use spark thrift server to operate data on hive.The Spark thrift Server is…
hu li
  • 11
  • 2
0
votes
0 answers

Sentry column access restriction

I am testing sentry to restrict column access for a role to access ssn column in a hive table on mapr cluster.I am unable to revoke access for that specific column.The error message below complains about managers_role does not exist.I verified my…
srini
  • 39
  • 1
  • 1
  • 7
0
votes
1 answer

Sentry database model usage example

Sentry has two models.one is file based model and second is database model.I currently have groups->roles-> permissions mapping in global policy file as below: [groups] mapr = admin_role analysts = analysts_role reporters =…
srini
  • 39
  • 1
  • 1
  • 7
1
2
3 4