admin user

[pk.4...@gmail.com]

Hi,

Does `hive`  user does not have admin role? I logged into beeline and ran following commands `show roles;` and it threw error. User `hive` do not have admin privilege to run this query/command or something like that (I forgot to copy/paste error and now I can not log into because of too many concurrent connection error).

fyi: I had also tried granting `hive` user admin role and it did not work. I had done it (grant role) in the past (when I was testing HP/SQL feature).

Who is the admin user in HS2/metastore, if not `hive` ?

Thanks,

- Praveen.

[Shafi Rasulov]

The admin users are listed in "hive.users.in.admin.role" config parameter (hive-site.xml). In mr3 case I guess hive user has admin role. But, admin role is special, thus you need to set it explicitly with "set role admin;" command. Afterwards hive user will have admin grants and you should be able to run "show roles" and everything else.

[Sungwoo Park]

To add more comments, you can list several users in the configuration key 'hive.users.in.admin.role'. If you run Docker containers as user 'root', you can also add 'root':

<property>

  <name>hive.users.in.admin.role</name>

  <value>root,hive</value>

</property>

What values do you use for the following configuration keys?

1) hive.metastore.pre.event.listeners or metastore.pre.event.listeners

1) hive.security.metastore.authorization.manager

2) hive.security.authorization.manager

Cheers,

--- Sungwoo 

[pk.4...@gmail.com]

Thanks Safi - that was helpful.

[pk.4...@gmail.com]

Thanks Sungwoo,

Please see my reply inline.

On Tuesday, September 8, 2020 at 10:25:30 PM UTC-7 Sungwoo Park wrote:

To add more comments, you can list several users in the configuration key 'hive.users.in.admin.role'. If you run Docker containers as user 'root', you can also add 'root':

<property>

  <name>hive.users.in.admin.role</name>

  <value>root,hive</value>

</property>

Good to know.

 

What values do you use for the following configuration keys?

1) hive.metastore.pre.event.listeners or metastore.pre.event.listeners

None for now - we may use our custom module in future.

 

1) hive.security.metastore.authorization.manager

org.apache.hadoop.hive.ql.security.authorization.DefaultHiveMetastoreAuthorizationProvider

 

2) hive.security.authorization.manager

Our custom authorization module. (including `hive.security.authenticator.manager` )

[Sungwoo Park]

What values do you use for the following configuration keys?

1) hive.metastore.pre.event.listeners or metastore.pre.event.listeners

None for now - we may use our custom module in future.

 

1) hive.security.metastore.authorization.manager

org.apache.hadoop.hive.ql.security.authorization.DefaultHiveMetastoreAuthorizationProvider

I don't find anything unusual in your setting, so if user 'hive' fails to obtain admin role, I think it is a different problem.

Cheers,

--- Sungwoo 

[Praveen Kumar]

Thanks Sungwoo.

After deleting the helm chart and reinstalling it the problem disappeared. 

--
You received this message because you are subscribed to a topic in the Google Groups "MR3" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/hive-mr3/KENr8i-kjI0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to hive-mr3+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/hive-mr3/d730a740-4778-4ed0-b89c-f6a1201b0ee4n%40googlegroups.com.