Hello,

The two first check are OK but the third file is empty and I still have no 
error on tagsync log.

Have you any other idea ?


Thanks for your help


Fabien


________________________________
De : Madhan Neethiraj <mneethi...@hortonworks.com> de la part de Madhan 
Neethiraj <mad...@apache.org>
Envoyé : mardi 6 juin 2017 17:43
À : user@ranger.apache.org
Objet : Re: Tag based policy doesn't work


To troubleshoot this issue, try the following:

-          Verify that Hive service (in Ranger – like dev_hive) is linked to 
Tag service (like dev_tag)

-          Verify whether tag-policies are present in local cache file in 
HiveServer2 host, typically at 
/etc/ranger/dev_hive/policycache/hiveServicer2_dev1_hive.json (replace dev_hive 
with service name)

-          Verify whether tags are present in local cache file in HiveServer2 
host, typically at 
/etc/ranger/dev_hive/policycache/hiveServicer2_dev1_hive_tag.json (replace 
dev_hive with service name)



Hope this helps.



Madhan







From: Loïc Chanel <loic.cha...@telecomnancy.net>
Reply-To: "user@ranger.apache.org" <user@ranger.apache.org>
Date: Tuesday, June 6, 2017 at 5:58 AM
To: "user@ranger.apache.org" <user@ranger.apache.org>
Subject: Re: Tag based policy doesn't work



Hi Fabien,



Can you provide more details on waht doesn't work ? I mean, you create a 
policy, but it is not enforced, right ?

Can you see in HiveServer logs that Hive asks Ranger for an authorization to 
execute your request ?



Thanks,





Loïc


Loïc CHANEL
System Big Data engineer
MS&T - Worldline Analytics Platform - Worldline (Villeurbanne, France)



2017-06-06 14:51 GMT+02:00 fabien VIROT 
<fabienfo...@hotmail.fr<mailto:fabienfo...@hotmail.fr>>:

Hello,



I got problems with tag based policy on ranger, when I create policy based on 
Atlas tag they doesn't work on Hive.

I have no log error (in Debug mode) on ranger tagsync and in Atlas.

I'm using beeline to send request to Hive.



Have you any idea of where the problem is ??



Thanks for your help



Fabien VIROT


Reply via email to