Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

> On July 13, 2018, 3:35 p.m., kalyan kumar kalvagadda wrote: > > sentry-hdfs/sentry-hdfs-common/src/main/java/org/apache/sentry/hdfs/HMSPaths.java > > Lines 881-885 (patched) > > > > > > Better way to avoid this

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67899/ --- (Updated July 13, 2018, 3:45 p.m.) Review request for sentry, Arjun Mishra,

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

> On July 13, 2018, 1:16 p.m., kalyan kumar kalvagadda wrote: > > From your comment, "Sentry client at NameNode does not create entry for > > external table. When user rename an external table with different path, > > null exception happens" > > > > Does does that mean sentry ACL's don't work

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67899/#review206055 ---

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

> On July 13, 2018, 1:16 p.m., kalyan kumar kalvagadda wrote: > > From your comment, "Sentry client at NameNode does not create entry for > > external table. When user rename an external table with different path, > > null exception happens" > > > > Does does that mean sentry ACL's don't work

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

> On July 13, 2018, 1:16 p.m., kalyan kumar kalvagadda wrote: > > From your comment, "Sentry client at NameNode does not create entry for > > external table. When user rename an external table with different path, > > null exception happens" > > > > Does does that mean sentry ACL's don't work

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

> On July 13, 2018, 1:16 p.m., kalyan kumar kalvagadda wrote: > > From your comment, "Sentry client at NameNode does not create entry for > > external table. When user rename an external table with different path, > > null exception happens" > > > > Does does that mean sentry ACL's don't work

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67899/#review206050 --- >From your comment, "Sentry client at NameNode does not create

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67899/#review206033 --- Ship it! Ship It! - Sergio Pena On July 12, 2018, 9:14

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67899/#review206025 --- Ship it! Ship It! - Arjun Mishra On July 12, 2018, 9:14

Re: Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67899/ --- (Updated July 12, 2018, 9:14 p.m.) Review request for sentry, Arjun Mishra,

Review Request 67899: SENTRY-2299: NPE In Sentry HDFS Sync Plugin

--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67899/ --- Review request for sentry, kalyan kumar kalvagadda and Sergio Pena. Bugs:

??????any parameters can change "hive" user when using sentry-hdfs sync

8??1??3??(??) 2:22 ??: "dev"<dev@sentry.apache.org>; : any parameters can change "hive" user when using sentry-hdfs sync Hi Experts,We have customers using sentry on CDH for data access control and enabled HDFS syhc function. The files that associated

Re: any parameters can change "hive" user when using sentry-hdfs sync

You can use below listed properties for that - sentry.authorization-provider.hdfs-user - sentry.authorization-provider.hdfs-group These should be available in hdfs-site.xml file used by namenode. If you are using CM, you may have to use safety valve to override the default configuration.

any parameters can change "hive" user when using sentry-hdfs sync

Hi Experts,We have customers using sentry on CDH for data access control and enabled HDFS syhc function. The files that associated with hive tables will be changed to hive:hive own. I did not find any documentation for the design, but our customer do not want use "hive" user as the file owner.

Re: Sentry-HDFS sync

Hi Mohammad, Sentry translates the permissions of hive tables/databases to underlying file system directories in form of file system ACLS. So, even without using HCat, you can still rely on file system permissions. Please see here for detailed explanation on how it works: