Unsubscribe
unsubscribe
Realm is required in beeline connection for users if display and logon name differs ,even its ensured with ldap authentciation
*Problem*: Realm is required in beeline connection for users if display and logon name differs ,even its ensured with ldap authentciation? While connecting with beeline,with configured ldap authentication some users connected without realm and some users connect with realm authentication.This is because of *while creating users in active directory* ,*display name differ with logon name.* During authentication,it can only validate by log on name only,but some users validate also by display name.Actually its only validate by on log on name but here here seems validate by display name. *Error* I got when login without realm in beeline: Error: Could not open client transport with JDBC Uri: jdbc:hive2://mylapn2215 :1/default;: Peer indicated failure: PLAIN auth failed: LDAP Authentication failed for user (state=08S01,code=0) Please refer the attached images and provide the ideas if you overcome this. Thanks, Matheswaran.S
Fwd: Some time realm is required for some users in beeline connection,even its ensured with ldap authentciation.!
Hi, FYI, Thanks, Mathes -- Forwarded message -- From: mathes waran <matheskris...@gmail.com> Date: Wed, Aug 17, 2016 at 6:02 PM Subject: Re: Some time realm is required for some users in beeline connection,even its ensured with ldap authentciation.! To: d...@hive.apache.org Hi , While connecting with beeline,with configured ldap authentication some users connected with without realm and some users connect with realm authentication.This is because of while creating users in active directory ,display name differ with logon name. During authentication,it can only validate by logon name only,but some users validate also by display name.Actually its only validate by on logon name but here it seems validate by display name. Please refer the attached images and provide the ideas if you overcome this. Thanks, Matheswaran.S On Tue, Aug 16, 2016 at 10:32 AM, mathes waran <matheskris...@gmail.com> wrote: > Hi , > > Problem: Why realm is required for some users in beeline connection,even > its ensured with ldap authentciation.? > > I have configured the beeline connection with ldap authentication,and its > working fine.Some times while connecting with that beeline connection some > users connected with out any any realm,its no issues.but with same > connection some Users required with domain name(Fully qualified domain > name).Actually ldap authentication does not require any domain in users,but > here it asks domain name for some users. > > Please find the error details and attached screen shot; > Error: Could not open client transport with JDBC Uri: > jdbc:hive2://mylapn2215 > :1/default;: Peer indicated failure: PLAIN auth failed: LDAP > Authentication > failed for user (state=08S01,code=0) > > Please suggest your ideas if you overcome this , > > Thanks in advance, > > Matheskrishna > >
Fwd: Some time realm is required for some users in beeline connection,even its ensured with ldap authentciation.!
Hi , FYI, Thanks, Mathes -- Forwarded message -- From: mathes waran <matheskris...@gmail.com> Date: Tue, Aug 16, 2016 at 10:32 AM Subject: Some time realm is required for some users in beeline connection,even its ensured with ldap authentciation.! To: d...@hive.apache.org Hi , Problem: Why realm is required for some users in beeline connection,even its ensured with ldap authentciation.? I have configured the beeline connection with ldap authentication,and its working fine.Some times while connecting with that beeline connection some users connected with out any any realm,its no issues.but with same connection some Users required with domain name(Fully qualified domain name).Actually ldap authentication does not require any domain in users,but here it asks domain name for some users. Please find the error details and attached screen shot; Error: Could not open client transport with JDBC Uri: jdbc:hive2://mylapn2215 :1/default;: Peer indicated failure: PLAIN auth failed: LDAP Authentication failed for user (state=08S01,code=0) Please suggest your ideas if you overcome this , Thanks in advance, Matheskrishna
Re: Add multiple users in admin role while running in hive configuration-reg
HI Thanks for the ideas..I checked out and its very useful link. Thanks, Matheswaran On Mon, Feb 22, 2016 at 11:57 PM, Takahiko Saito <tysa...@gmail.com> wrote: > Hi Matheswaran, > > I believe existing admin can create a new role(admin) for other users via > beeline: > > https://cwiki.apache.org/confluence/display/Hive/SQL+Standard+Based+Hive+Authorization#SQLStandardBasedHiveAuthorization-RoleManagementCommands > > On Mon, Feb 22, 2016 at 3:12 AM, mathes waran <matheskris...@gmail.com> > wrote: > >> Hi, >> I had set the property of set.users.admin.role as >> >> >> hive.users.in.admin.role >> user1,user2 >> >> Comma separated list of users who are in admin role for bootstrapping. >> More users can be added in ADMIN role later. >> >> >> >> in hive-site.xml. If i want to add another users,stop the process and >> added users to this property(admin role) for the purpose of* hive >> authorization*.Then again i will started the process and working on >> it.But my point is *how to add users to admin role without stopping and >> restarting the process.Is it possible..?if i added any users >> name,i don't want to restart or stop the process,simultaneously i want to >> execute it.* >> >> Ping your suggestions and ideas to my mail id. >> >> Thanks, >> Matheswaran >> > > > > -- > Takahiko Saito >
Add multiple users in admin role while running in hive configuration-reg
Hi, I had set the property of set.users.admin.role as hive.users.in.admin.role user1,user2 Comma separated list of users who are in admin role for bootstrapping. More users can be added in ADMIN role later. in hive-site.xml. If i want to add another users,stop the process and added users to this property(admin role) for the purpose of* hive authorization*.Then again i will started the process and working on it.But my point is *how to add users to admin role without stopping and restarting the process.Is it possible..?if i added any users name,i don't want to restart or stop the process,simultaneously i want to execute it.* Ping your suggestions and ideas to my mail id. Thanks, Matheswaran
