Sentry: SentryAccessDeniedException Announcing the arrival of Valued Associate #679: Cesar...
Is "Reachable Object" really an NP-complete problem?
How can I use the Python library networkx from Mathematica?
Do jazz musicians improvise on the parent scale in addition to the chord-scales?
Is it a good idea to use CNN to classify 1D signal?
What's the meaning of "fortified infraction restraint"?
Around usage results
Do I really need to have a message in a novel to appeal to readers?
Do wooden building fires get hotter than 600°C?
Should I use a zero-interest credit card for a large one-time purchase?
Would "destroying" Wurmcoil Engine prevent its tokens from being created?
Using et al. for a last / senior author rather than for a first author
How do I find out the mythology and history of my Fortress?
What are the out-of-universe reasons for the references to Toby Maguire-era Spider-Man in ITSV
Is grep documentation wrong?
How to tell that you are a giant?
Chinese Seal on silk painting - what does it mean?
First console to have temporary backward compatibility
Circuit to "zoom in" on mV fluctuations of a DC signal?
How does the math work when buying airline miles?
How to deal with a team lead who never gives me credit?
Is it cost-effective to upgrade an old-ish Giant Escape R3 commuter bike with entry-level branded parts (wheels, drivetrain)?
Can a new player join a group only when a new campaign starts?
How to react to hostile behavior from a senior developer?
Do square wave exist?
Sentry: SentryAccessDeniedException
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
I am getting below error on beeline on kerberised cluster.
0: jdbc:hive2://master-03.test:10000/def> show roles;
INFO : Compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:role, type:string, comment:from deserializer)], properties:null)
INFO : Completed compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.074 seconds
INFO : Executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Starting task [Stage-0:DDL] in serial mode
ERROR : Error processing Sentry command: Access denied to testuser.Please grant admin privilege to testuser.
ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser
INFO : Completed executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.042 seconds
Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser (state=08S01,code=1)
I user is already in hive & sentry group.
[testuser@edge-01 ~]$ id
uid=1012(testuser) gid=1002(cdhdeveloper) groups=1002(cdhdeveloper),975(sentry),980(hive) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[testuser@edge-01 ~]$
I have rechecked on all Sentry related configurations & all are as expected.
Can some one please help on this?
cloudera-quickstart-vm
edited 13 hours ago
DavidPostill♦
108k27235271
asked 14 hours ago
AshuAshu
1
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I am getting below error on beeline on kerberised cluster.
0: jdbc:hive2://master-03.test:10000/def> show roles;
INFO : Compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:role, type:string, comment:from deserializer)], properties:null)
INFO : Completed compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.074 seconds
INFO : Executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Starting task [Stage-0:DDL] in serial mode
ERROR : Error processing Sentry command: Access denied to testuser.Please grant admin privilege to testuser.
ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser
INFO : Completed executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.042 seconds
Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser (state=08S01,code=1)
I user is already in hive & sentry group.
[testuser@edge-01 ~]$ id
uid=1012(testuser) gid=1002(cdhdeveloper) groups=1002(cdhdeveloper),975(sentry),980(hive) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[testuser@edge-01 ~]$
I have rechecked on all Sentry related configurations & all are as expected.
Can some one please help on this?
cloudera-quickstart-vm
edited 13 hours ago
DavidPostill♦
108k27235271
asked 14 hours ago
AshuAshu
1
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
The answer is in your question. "Please grant admin privilege to testuser." is a big clue as to what you need to do ...
– DavidPostill♦
13 hours ago
add a comment |
I am getting below error on beeline on kerberised cluster.
0: jdbc:hive2://master-03.test:10000/def> show roles;
INFO : Compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:role, type:string, comment:from deserializer)], properties:null)
INFO : Completed compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.074 seconds
INFO : Executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Starting task [Stage-0:DDL] in serial mode
ERROR : Error processing Sentry command: Access denied to testuser.Please grant admin privilege to testuser.
ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser
INFO : Completed executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.042 seconds
Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser (state=08S01,code=1)
I user is already in hive & sentry group.
[testuser@edge-01 ~]$ id
uid=1012(testuser) gid=1002(cdhdeveloper) groups=1002(cdhdeveloper),975(sentry),980(hive) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[testuser@edge-01 ~]$
I have rechecked on all Sentry related configurations & all are as expected.
Can some one please help on this?
cloudera-quickstart-vm
edited 13 hours ago
DavidPostill♦
108k27235271
asked 14 hours ago
AshuAshu
1
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I am getting below error on beeline on kerberised cluster.
0: jdbc:hive2://master-03.test:10000/def> show roles;
INFO : Compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Semantic Analysis Completed
INFO : Returning Hive schema: Schema(fieldSchemas:[FieldSchema(name:role, type:string, comment:from deserializer)], properties:null)
INFO : Completed compiling command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.074 seconds
INFO : Executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e): show roles
INFO : Starting task [Stage-0:DDL] in serial mode
ERROR : Error processing Sentry command: Access denied to testuser.Please grant admin privilege to testuser.
ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser
INFO : Completed executing command(queryId=hive_20190417124949_0bb23295-3329-4225-aabf-89f6e721d56e); Time taken: 0.042 seconds
Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.SentryGrantRevokeTask. SentryAccessDeniedException: Access denied to testuser (state=08S01,code=1)
I user is already in hive & sentry group.
[testuser@edge-01 ~]$ id
uid=1012(testuser) gid=1002(cdhdeveloper) groups=1002(cdhdeveloper),975(sentry),980(hive) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[testuser@edge-01 ~]$
I have rechecked on all Sentry related configurations & all are as expected.
Can some one please help on this?
cloudera-quickstart-vm
cloudera-quickstart-vm
edited 13 hours ago
DavidPostill♦
108k27235271
asked 14 hours ago
AshuAshu
1
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 13 hours ago
DavidPostill♦
108k27235271
asked 14 hours ago
AshuAshu
1
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 13 hours ago
DavidPostill♦
108k27235271
edited 13 hours ago
DavidPostill♦
108k27235271
edited 13 hours ago
DavidPostill♦
108k27235271
108k27235271
asked 14 hours ago
AshuAshu
1
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 14 hours ago
AshuAshu
1
asked 14 hours ago
AshuAshu
1
1
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Ashu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
The answer is in your question. "Please grant admin privilege to testuser." is a big clue as to what you need to do ...
– DavidPostill♦
13 hours ago
add a comment |
The answer is in your question. "Please grant admin privilege to testuser." is a big clue as to what you need to do ...
– DavidPostill♦
13 hours ago
The answer is in your question. "Please grant admin privilege to testuser." is a big clue as to what you need to do ...
– DavidPostill♦
13 hours ago
The answer is in your question. "Please grant admin privilege to testuser." is a big clue as to what you need to do ...
– DavidPostill♦
13 hours ago
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Ashu is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1426528%2fsentry-sentryaccessdeniedexception%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Ashu is a new contributor. Be nice, and check out our Code of Conduct.
Ashu is a new contributor. Be nice, and check out our Code of Conduct.
Ashu is a new contributor. Be nice, and check out our Code of Conduct.
Ashu is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1426528%2fsentry-sentryaccessdeniedexception%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
The answer is in your question. "Please grant admin privilege to testuser." is a big clue as to what you need to do ...
– DavidPostill♦
13 hours ago