CDH users commonly use YARN setting mapreduce.job.acl-view-job to control which users have access to view YARN application logs through Resource Manager or JobHistory Server web UI. If you have below setting under CM > YARN > Configuration It will allow “user2” to be able to view all MapReduce Job logs …
After a CDH cluster is enabled with Kerberos, by default, HiveServer2’s web UI will also be enabled with SPNEGO, sometimes it will cause HiveServer2’s web UI to reject user’s request with below error: This can happen when Kerberos has detected that user is trying to authenticate twice within a short …
Welcome again to my 5th episode of Ranger series. In this post, I will focus on what Hive Plugin is in Ranger, how it works and what happens behind the scene when you try to create or modify tables in Hive. If you have missed my previous episodes, please review …
As more and more companies store large amount of data, either privately or in the cloud, data governance has become more and more important, which can help companies to decide: Where is the source of data How data is transformed When data was modified How data is classified etc etc …
In this post, I will explain how the retention policy works in Infra-Solr for Ranger’s Audit data, and how to confirm that it works. The retention policy for Ranger’s Audit data in Infra-Solr is controlled by the below setting in Ambari > Ranger > CONFIGS > ADVANCED > “Advanced ranger-solr-configuration” …
My new Snowflake Blog is now live. I will not be updating this blog anymore but will continue with new contents in the Snowflake world!