Greetings,
I’m currently working on a short EMRFS Role based authentication assignment. I
currently have a EMR cluster with Hive installed and with LDAP enabled on Hive
Server.
After logging to the beeline and firing a query, I could see in all api calls
the group information for the user is passed as empty list.
[ElasticMapReduce/1.0.0 emrfs/s3n {} user:user1,groups:[],
aws-sdk-java/1.11.510 Li
Because of this, Its not getting mapped to any emrfs roles mapped for the
group. Here is LDAP config that I have on my hive-site.xml.
<property>
<name>hive.server2.authentication</name>
<value>LDAP</value>
</property>
<property>
<name>hive.server2.authentication.ldap.url</name>
<value>ldap://example.com</value>
</property>
<property>
<name>hive.server2.authentication.ldap.Domain</name>
<value>example.com</value>
</property>
Do I need any additional configurations in hive server/ EMR Hadoop to pull in
my group information. Any response will be appreciated.
Thanks,
Praveen.