Hi,

Which version of Hive and Ranger are you using ? Can you check if Ranger has 
added  hiveserver2 parameters  
hive.conf.restricted.list,hive.security.command.whitelist  in the hive 
configuration file(s) ?
Can you please list out these parameter values here ?

Thanks,
Selva-

From:  Anandha L Ranganathan <analog.s...@gmail.com>
Reply-To:  "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org>
Date:  Monday, December 19, 2016 at 5:30 PM
To:  "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org>
Subject:  Unable to connect to S3 after enabling Ranger with Hive

Hi,
 
Unable to create table pointing to S3 after enabling Ranger.

This is database we created before enabling Ranger.
SET fs.s3a.impl=org.apache.hadoop.fs.s3a.S3AFileSystem;
SET fs.s3a.access.key=xxxxxxx;
SET fs.s3a.secret.key=yyyyyyyyyyyyyyy;
 
 
CREATE DATABASE IF NOT EXISTS backup_s3a1
COMMENT "s3a schema test"
LOCATION "s3a://gd-de-dp-db-hcat-backup-schema/";
After Ranger was enabled, we try to create another database but it is throwing 
error.
0: jdbc:hive2://usw2dxdpmn01.local:> SET 
fs.s3a.impl=org.apache.hadoop.fs.s3a.S3AFileSystem;
Error: Error while processing statement: Cannot modify fs.s3a.impl at runtime. 
It is not in list of params that are allowed to be modified at runtime 
(state=42000,code=1)
 
 

I configured the credentials in the core-site.xml and always returns 
"undefined" when I am trying to see the values for  below commands. This is in 
our " dev" environment where Ranger is enabled. In   other environment where 
Ranger is not installed , we are not facing this problem.

0: jdbc:hive2://usw2dxdpmn01:10010> set  fs.s3a.impl;
+-----------------------------------------------------+--+
|                         set                         |
+-----------------------------------------------------+--+
| fs.s3a.impl=org.apache.hadoop.fs.s3a.S3AFileSystem  |
+-----------------------------------------------------+--+
1 row selected (0.006 seconds)
0: jdbc:hive2://usw2dxdpmn01:10010> set fs.s3a.access.key;
+---------------------------------+--+
|               set               |
+---------------------------------+--+
| fs.s3a.access.key is undefined  |
+---------------------------------+--+
1 row selected (0.005 seconds)
0: jdbc:hive2://usw2dxdpmn01:10010> set fs.s3a.secret.key;
+---------------------------------+--+
|               set               |
+---------------------------------+--+
| fs.s3a.secret.key is undefined  |
+---------------------------------+--+
1 row selected (0.005 seconds)
Any help or pointers is appreciated. 


Reply via email to