Re: Permission Denied: User doesn't have USE privilege on database
Hi All. Thanks Bosco,Selva and Muthu for your suggestion and feedback towards Ranger by which i am able to build and work successfully even with Hadoop,Hive lower Versions .Still,I have a doubt on creating DB that while enabling the hadoop,hive etc scripts we need to provide information like db name and user authentications where if i am providing separate servers i.e., Ranger server, Hadoop, Hive etc.At that point i need to provide a db informations for each server (jdbc:localhost) or a common db (jdbc:RANGER SERVER IP). And i am requesting you to provide the Knox Repo creating example. Because where i dont know what to provide in Knox url Thanks all With regards Amithsha On Fri, Dec 19, 2014 at 11:22 AM, Don Bosco Durai bo...@apache.org wrote: Hi Muthupandi Glad to know it worked for you. Please continue to provide your feedback and also if you have any suggestions to add new features. Thanks Bosco On Dec 18, 2014, at 3:13 AM, Muthu Pandi muthu1...@gmail.com wrote: Yes you are right i had done mistake by not configuring hive repository correctly, after configuring hive repository and its name it use the ranger authorization. Great work Guys, Authorization look simple and effective. *RegardsMuthupandi.K* Think before you print. On Wed, Dec 17, 2014 at 2:43 AM, Don Bosco Durai bo...@apache.org wrote: Hi Muthupandi At an high level, it seems Hive is still using it’s native authorization. Can you check the Audit in Ranger to see whether Ranger is auditing it? Thanks Bosco On Dec 15, 2014, at 9:19 PM, Muthu Pandi muthu1...@gmail.com wrote: Hi All I have configured Ranger on Hadoop 2.6.0 and Hive 0.14 and set up users and policies. When i try to test the scenario using the ODBC i got exception as Driver Version: V1.1.0.0 Running connectivity tests... Attempting connection Failed to establish connection SQLSTATE: HY000[Microsoft][HiveODBC] (68) Error returned trying to set default as the initial database: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default]; Also tried quoting the database name `default` but the query failed with the following error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default] TESTS COMPLETED WITH ERROR. It clearly states that the user doesn't have privilege for USE command in hive. While configuring user permission i can able to see different permissions like select,update,create,drop etc., but not USE. Kindly point me in direction where am missing. *RegardsMuthupandi.K* Think before you print.
Re: Permission Denied: User doesn't have USE privilege on database
Amithsa Still,I have a doubt on creating DB that while enabling the hadoop,hive etc scripts we need to provide information like db name and user authentications where if i am providing separate servers i.e., Ranger server, Hadoop, Hive etc.At that point i need to provide a db informations for each server (jdbc:localhost) or a common db (jdbc:RANGER SERVER IP). I am not sure what you mean by create DB while enabling the plugins. The database detail we provide during enabling the component is only used to connect the DB. The DB and tables are only created during the Ranger Admin setup. From the design perspective, each plugin writes directly to the DB or to HDFS (if setup) with the audit logs. This helps removing the Ranger Admin server as the bottle neck for doing audit logging. The Ranger Admin host information is needed in the plugin, so that the plugin can pull the policies from the Ranger Admin. Regarding your Knox question, you have to set the URL as per your deployment. E.g. https://knox_host:8443/gateway/admin/api/v1/topologies (Replace the knox_host with your fully qualified host name) Thanks Bosco On Dec 19, 2014, at 1:33 AM, Amith sha amithsh...@gmail.com wrote: Hi All. Thanks Bosco,Selva and Muthu for your suggestion and feedback towards Ranger by which i am able to build and work successfully even with Hadoop,Hive lower Versions .Still,I have a doubt on creating DB that while enabling the hadoop,hive etc scripts we need to provide information like db name and user authentications where if i am providing separate servers i.e., Ranger server, Hadoop, Hive etc.At that point i need to provide a db informations for each server (jdbc:localhost) or a common db (jdbc:RANGER SERVER IP). And i am requesting you to provide the Knox Repo creating example. Because where i dont know what to provide in Knox url Thanks all With regards Amithsha On Fri, Dec 19, 2014 at 11:22 AM, Don Bosco Durai bo...@apache.org mailto:bo...@apache.org wrote: Hi Muthupandi Glad to know it worked for you. Please continue to provide your feedback and also if you have any suggestions to add new features. Thanks Bosco On Dec 18, 2014, at 3:13 AM, Muthu Pandi muthu1...@gmail.com mailto:muthu1...@gmail.com wrote: Yes you are right i had done mistake by not configuring hive repository correctly, after configuring hive repository and its name it use the ranger authorization. Great work Guys, Authorization look simple and effective. Regards Muthupandi.K Think before you print. On Wed, Dec 17, 2014 at 2:43 AM, Don Bosco Durai bo...@apache.org mailto:bo...@apache.org wrote: Hi Muthupandi At an high level, it seems Hive is still using it’s native authorization. Can you check the Audit in Ranger to see whether Ranger is auditing it? Thanks Bosco On Dec 15, 2014, at 9:19 PM, Muthu Pandi muthu1...@gmail.com mailto:muthu1...@gmail.com wrote: Hi All I have configured Ranger on Hadoop 2.6.0 and Hive 0.14 and set up users and policies. When i try to test the scenario using the ODBC i got exception as Driver Version: V1.1.0.0 Running connectivity tests... Attempting connection Failed to establish connection SQLSTATE: HY000[Microsoft][HiveODBC] (68) Error returned trying to set default as the initial database: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default]; Also tried quoting the database name `default` but the query failed with the following error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default] TESTS COMPLETED WITH ERROR. It clearly states that the user doesn't have privilege for USE command in hive. While configuring user permission i can able to see different permissions like select,update,create,drop etc., but not USE. Kindly point me in direction where am missing. Regards Muthupandi.K Think before you print.
Re: Permission Denied: User doesn't have USE privilege on database
Hi Muthupandi Glad to know it worked for you. Please continue to provide your feedback and also if you have any suggestions to add new features. Thanks Bosco On Dec 18, 2014, at 3:13 AM, Muthu Pandi muthu1...@gmail.com wrote: Yes you are right i had done mistake by not configuring hive repository correctly, after configuring hive repository and its name it use the ranger authorization. Great work Guys, Authorization look simple and effective. Regards Muthupandi.K Think before you print. On Wed, Dec 17, 2014 at 2:43 AM, Don Bosco Durai bo...@apache.org mailto:bo...@apache.org wrote: Hi Muthupandi At an high level, it seems Hive is still using it’s native authorization. Can you check the Audit in Ranger to see whether Ranger is auditing it? Thanks Bosco On Dec 15, 2014, at 9:19 PM, Muthu Pandi muthu1...@gmail.com mailto:muthu1...@gmail.com wrote: Hi All I have configured Ranger on Hadoop 2.6.0 and Hive 0.14 and set up users and policies. When i try to test the scenario using the ODBC i got exception as Driver Version: V1.1.0.0 Running connectivity tests... Attempting connection Failed to establish connection SQLSTATE: HY000[Microsoft][HiveODBC] (68) Error returned trying to set default as the initial database: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default]; Also tried quoting the database name `default` but the query failed with the following error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default] TESTS COMPLETED WITH ERROR. It clearly states that the user doesn't have privilege for USE command in hive. While configuring user permission i can able to see different permissions like select,update,create,drop etc., but not USE. Kindly point me in direction where am missing. Regards Muthupandi.K Think before you print.
Re: Permission Denied: User doesn't have USE privilege on database
Hi Muthupandi At an high level, it seems Hive is still using it’s native authorization. Can you check the Audit in Ranger to see whether Ranger is auditing it? Thanks Bosco On Dec 15, 2014, at 9:19 PM, Muthu Pandi muthu1...@gmail.com wrote: Hi All I have configured Ranger on Hadoop 2.6.0 and Hive 0.14 and set up users and policies. When i try to test the scenario using the ODBC i got exception as Driver Version: V1.1.0.0 Running connectivity tests... Attempting connection Failed to establish connection SQLSTATE: HY000[Microsoft][HiveODBC] (68) Error returned trying to set default as the initial database: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default]; Also tried quoting the database name `default` but the query failed with the following error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ami] does not have [USE] privilege on [default] TESTS COMPLETED WITH ERROR. It clearly states that the user doesn't have privilege for USE command in hive. While configuring user permission i can able to see different permissions like select,update,create,drop etc., but not USE. Kindly point me in direction where am missing. Regards Muthupandi.K Think before you print.
