Install and Enable Ranger Hive Plug-in
Extract your build at the appropriate place.
Copy
ranger-<version>-SNAPSHOT-hive-plugin.tar.gz
tohiveServer2
host in directory/usr/hdp/<hdp-version>/
.Change directory to
/usr/hdp/<hdp-version>
.Untar
ranger-<version>-SNAPSHOT-SNAPSHOT-hive-plugin.tar.gz
.Change directories to
ranger-<version>-SNAPSHOT-hive-plugin
.Edit the
install.properties
file.Enter the appropriate values for each of the following properties:
Table 6.15. install.properties Property Values
Property Values POLICY_MGR_URL http://<FQDN_of_ranger_admin_host>:6080 REPOSITORY_NAME hivedev Additionally, for the Audit info, Solr/HDFS options are available.
Enable the Hive plug-in:
export JAVA_HOME=/usr/lib/jvm/java-1.7.0-openjdk.x86_64 ./enable-hive-plugin.sh
Stop and start hiveserver2:
ps -aux | grep hive | grep -i hiveserver2 | awk '{print $1,$2}' | grep hive | awk '{print $2}' | xargs kill >/dev/null 2>&1 su hive -c "nohup /usr/hdp/current/hive-server2/bin/hiveserver2 -hiveconf hive.metastore.uris="" -hiveconf hive.log.dir=/var/log/hive -hiveconf hive.log.file=hiveserver2.log >/var/log/hive/hiveserver2.out 2> /var/log/hive/hiveserver2err.log &"
Create the default repo for Hive with proper configuration.
In the custom repo configuration, set the component user to
hive
for each of the following properties:policy.grantrevoke.auth.users
tag.download.auth.users
Use the
Audit->plugins
tab to verify that the Hive plug-in is communicating with Ranger admin.