[summary] HUE integrates Sentry and manages Sentry permissions through the HUE interface

Integrating Sentry into HUE can have many benefits:

1. Create a role through the HUE interface

2. In the Sentry management interface of HUE, you can Grant privileges to the user

3. Create a group with the same name as role in Sentry in Hue

4. Assign role to a user

5. Ensure that the group of HUE users on all nodes is the same as that of group in HUE

HUE integrated Sentry operation

1. Add the group to which the user logged in to HUE management and permissions belongs to the sentry-site.xml configuration file

Sentry.service.admin.group hive,impala,hue

2. Configure hue.ini

[root@gateway2 ~] # vim / usr/local/hue-3.9.0-cdh6.9.0-compile/hue/desktop/conf/hue.ini#### Settings for the Sentry lib# # [libsentry] # Hostname or IP of server.## hostname=localhosthostname=10.10.10.10# Port the sentry service is running on.port=8038# Sentry configuration directory Where sentry-site.xml is located.sentry_conf_dir=/usr/local/sentry/conf

3. Copy the sentry-site.xml file to the directory specified by the sentry_conf_dir variable in the hue.ini configuration file

If the sentry service is deployed on another server, copy the file to the same server as hue

[root@gateway2] # ll / usr/local/sentry/conf-rw-r--r-- 1 root root 2220 November 21 2016 sentry-site.xml

4. Restart HUE service and Sentry service

Nohup / usr/local/hue-3.9.0-cdh6.9.0-compile/hue/build/env/bin/supervisor & sentry--command service-conffile / etc/sentry/conf/sentry-site.xml