Explanation/Reference:
Sentry Setup with Hive.
Before Sentry is setup we have to ensure that Kerberos is enabled in the cluster and users have specific access to folders and services. Follow the below steps to setup Sentry with Kerberos:
1. Open Cloudera Manager and go to settings and install new parcel http://archive.cloudera.com/sentry/ parcels/latest/
2. Set the user for hive warehouse folder in Hadoop to hive
3. In Cloudera Manager go to HiveServer2 settings
4. Under Configurations section, uncheck the HiveServer2 Enable Impersonation property.
5. Create a new File sentry-provider.ini in /user/hive/sentry
6. Go to Cloudera Manager MapReduce configuration and set the Minimum User ID for Job Submission to
0.
7. In Hive settings go to Service-Wide category, Sentry section, check Enable Sentry Authorization.
8. Save all changes and deploy client configuration.
9. Restart cluster for changes to take effect.
Incorrect Answers:
A: You use the command bdacli enable sentry, not bdacli sentry enable.
References: http://ngvtech.in/droidhub/hadoop-kerberos-security/