...
If all services in the minicluster are set up correctly and are up, run this to restart the Impala cluster with Ranger authorization:
Code Block |
---|
bin/start-impala-cluster.py --impalad_args="--server-name=server1 --ranger_service_type=hive --ranger_app_id=impala --authorization_provider=ranger" --catalogd_args="--server-name=server1 --ranger_service_type=hive --ranger_app_id=impala --authorization_provider=ranger" |
If you want to investigate Hive behaviors in Ranger authorization, run this to restart Hive:
Code Block |
---|
testdata/bin/run-hive-server.sh -with_ranger |
Details
When starting an Impala minicluster on a local machine using '$IMPALA_HOME/bin/start-impala-cluster.py', by default there is no authorization service, e.g., Sentry or Ranger, enabled on this cluster. We could enable the Ranger service initialized with the default policies on an Impala minicluster by the following steps (assuming that we have already executed '$IMPALA_HOME/testdata/bin/run-all.sh').
...