Hi Vivek, Till this point Apache Hive and Apache Sentry were never fully compatible at release checkpoints. We were working with Hive community to address that. The current Sentry master is now compatible with Hive 1.1.0 release. We'll soon start working on our next release which will work with Hive 1.1.0
thanks Prasad On Wednesday, March 11, 2015, Vivek Shrivastava <[email protected]> wrote: > Thanks Prasad for information. Would you recommend any combination of > release apache hive and apache sentry release that works. Even if we don't > go with service based comprehensive feature and just implement policy file > based approach. > > Regards, > > Vivek > > On Wed, Mar 11, 2015 at 2:18 PM, Prasad Mujumdar <[email protected] > <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: > >> Hi Vivek, >> >> Unfortunately you need custom patches on top of Hive for any Sentry >> functionality to work. >> Hive 1.1.0 is just out and we are upgrading Sentry build to t hat release >> (SENTRY-670). >> >> thanks >> Prasad >> >> >> On Mon, Mar 9, 2015 at 3:06 PM, Vivek Shrivastava < >> [email protected] >> <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: >> >>> Is there anyway I can use atleast achieve minimal functionality of >>> Sentry using file based policy file with any version of Hive ( 12, 13.1 or >>> 14.0 )? >>> Like the way it was in Sentry 1.2? >>> >>> On Mon, Mar 9, 2015 at 12:59 AM, Vivek Shrivastava < >>> [email protected] >>> <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: >>> >>>> Thanks Prasad and Ma. It seems the trunk is using Hadoop 2.6.0. My >>>> build of Sentry was failing due to missing snapshot of Calcite at Cloudera >>>> location. Can I build it with Hadoop 2.4.0? >>>> On Mar 8, 2015 10:06 PM, "Prasad Mujumdar" <[email protected] >>>> <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: >>>> >>>>> >>>>> To be more specific, Sentry 1.4 is not fully compatible with >>>>> Apache Hive. The current Sentry 1.5 codebase (unleased) is now compatible >>>>> with Hive trunk. >>>>> >>>>> thanks >>>>> Prasad >>>>> >>>>> >>>>> On Sun, Mar 8, 2015 at 6:52 PM, Ma, Junjie <[email protected] >>>>> <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: >>>>> >>>>>> Hi Vivek, >>>>>> Currently, Apache Sentry can't work with Apache Hive. The Hive in CDH >>>>>> is enhanced by Cloudera and can be integrated with Sentry for the >>>>>> authorization. >>>>>> >>>>>> Best regards, >>>>>> >>>>>> Colin Ma(Ma Jun Jie) >>>>>> >>>>>> -----Original Message----- >>>>>> From: Vivek Shrivastava [mailto:[email protected] >>>>>> <javascript:_e(%7B%7D,'cvml','[email protected]');>] >>>>>> Sent: Sunday, March 8, 2015 6:59 PM >>>>>> To: [email protected] >>>>>> <javascript:_e(%7B%7D,'cvml','[email protected]');>; >>>>>> Vivek Shrivastava >>>>>> Subject: Unable to integrate Hiveserver2 on hive 13.1 with Sentry 1.4 >>>>>> >>>>>> Hi, >>>>>> >>>>>> I could see that my setup for CDH 5.3.2 is working fine with >>>>>> Hiveserver2, integrated with Kerberos and Sentry 1.4-cdh5.3.2. But >>>>>> similar >>>>>> setup is not working for Apache Sentry 1.4 release and Apache Hive 13.1 >>>>>> release. With the sample configration I am getting this error. Appreciate >>>>>> any thoughts. >>>>>> >>>>>> 2015-03-08 07:26:52,191 INFO [pool-5-thread-1]: session.SessionState >>>>>> (SessionState.java:start(360)) - No Tez session required at this >>>>>> point. >>>>>> hive.execution.engine=mr. >>>>>> >>>>>> 2015-03-08 07:26:52,194 ERROR [pool-5-thread-1]: >>>>>> thrift.ProcessFunction >>>>>> (ProcessFunction.java:process(41)) - Internal error processing >>>>>> OpenSession >>>>>> >>>>>> java.lang.NoSuchFieldError: HIVE_EXEC_FILTER_HOOK >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.sentry.binding.hive.HiveAuthzBindingSessionHook.<clinit>(HiveAuthzBindingSessionHook.java:38) >>>>>> >>>>>> at java.lang.Class.forName0(Native Method) >>>>>> >>>>>> at java.lang.Class.forName(Class.java:274) >>>>>> >>>>>> at org.apache.hadoop.hive.ql.hook >>>>>> s.HookUtils.getHooks(HookUtils.java:59) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hive.service.cli.session.SessionManager.executeSessionHooks(SessionManager.java:223) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hive.service.cli.session.SessionManager.openSession(SessionManager.java:136) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hive.service.cli.CLIService.openSessionWithImpersonation(CLIService.java:161) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hive.service.cli.thrift.ThriftCLIService.getSessionHandle(ThriftCLIService.java:265) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hive.service.cli.thrift.ThriftCLIService.OpenSession(ThriftCLIService.java:191) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession.getResult(TCLIService.java:1253) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession.getResult(TCLIService.java:1238) >>>>>> >>>>>> at >>>>>> org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39) >>>>>> >>>>>> at >>>>>> org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingProcessor.process(HadoopThriftAuthBridge20S.java:628) >>>>>> >>>>>> at >>>>>> >>>>>> org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:206) >>>>>> >>>>>> at >>>>>> >>>>>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) >>>>>> >>>>>> at >>>>>> >>>>>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) >>>>>> >>>>>> at java.lang.Thread.run(Thread.java:745) >>>>>> >>>>>> 2015-03-08 07:37:38,566 INFO [Thread-3]: metastore.HiveMetaStore >>>>>> (HiveMetaStore.java:run(5334)) - Shutting down hive metastore. >>>>>> 2015-03-08 07:37:41,173 INFO [main]: metastore.HiveMetaStore >>>>>> (HiveMetaStore.java:main(5317)) - Starting hive metastore on port 9083 >>>>>> >>>>> >>>>> >>> >> >
