Shulou(Shulou.com)06/03 Report--

The main point of this article is not configuration. You need to learn how to configure. Please see https://blog.51cto.com/smilemask/2043930.

1.add jar cannot be used because sentry thinks that referencing a third-party jar package can bypass permissions to get the data you want, so what if you really need a reference? Cdh provides a parameter hive.reloadable.aux.jars.path, which has replaced the original aux jar path. Specify the lib directory after you upload it to hiveserver2. If there is a duplicate package name, you can use the reload command to reload it. So what about how to develop and need testing? By creating a non-existent function to bypass, for example, I want to reference a json-serde package, execute CREATE FUNCTION testfc AS 'test' using jar' hdfs:///tmp/json-serde_jar_file.jar'; in hql, this sentence will report an error, but will reference your jar package to hs2, and then execute the sql statement, you need to pay attention to grant uri authorization

two。 Turn on hdfs sentry synchronization. Basically, when hive enables sentry, the secondary option is also enabled, so that permissions are securely restricted at both the sql level and the file system level. When enabled, the synchronization directory you specify, such as the library or table under / user/hive/warehouse, will become hive:hive 771, and then you can use hadoop fs getfacl to check the library or table to get some special user permissions, which are the same as those set on hive or impala. When the sentry is returned, the user and group permissions change back to the original settings. It is worth noting that if the new data is added in hdfs, then the permission after hdfs synchronization is enabled, hive:hive 771, which requires additional processing, because users cannot view the data. If it is some external table path such as / tmp/aaa/database/table, when you set the extra synchronization directory / tmp/aaa, the aaa directory will not have 771 hive:hive permissions, but will not be like that at the library level, because there is a default configured warehouse directory in hive.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.