Check the jdbc.url property in the Ranger/Hive Service config. It should be the 
same as what you would have used with beeline on command line.

 

Bosco

 

 

From: Sanket Gaykar <sanketgaykar....@gmail.com>
Reply-To: <user@ranger.apache.org>
Date: Wednesday, January 9, 2019 at 4:31 AM
To: <user@ranger.apache.org>
Subject: Re: ranger fails to connect with hive metastore

 

Can someone please address this issue.

 

On Fri, 4 Jan 2019 at 17:42, Sanket Gaykar <sanketgaykar....@gmail.com> wrote:

Hi,

We have a dedicate instance for Apache Ranger, where we run the ranger-admin 
service, also we have installed the Ranger hive plugin on the instance where 
HiveServer2 is running. Below are the configurations we have:

 

Ranger(Ranger-Admin) running on SSL and Kerberos.
HiveServer2 running on SSL and Kerberos.
Hive Metastore (mysql) runs only SSL.
Web Ui has the following configurations:

Service name : hive

Active status: enabled

Username: admin

Password: ***

 

Extra configurations:

 

hive.site.file.path: /etc/hive/conf/hive-site.xml

policy.auth.download.users: hive

tag.auth.download.users:hive

enable.hive.metastore.lookup: true

 

However when ranger tries to connect to Hive Metastore when using auto suggest 
while creating policies we get the following error:

 

SASL negotiation failure. No common protection layer between client and server.

 

 

 

 

 

Reply via email to