HDP 315 | Hive DDL查询问题

Question

已安装HDP 3.1.5，并启用了KERBEROS安全性。在Hive中，正常的创建表工作正常。但是，当我尝试创建任何角色时，都会遇到错误。请提出解决方案。

0: jdbc:hive2://host> create role bdauserRole;
INFO  : Compiling command(queryId=hive_20200320085236_d9a4f82e-dab8-4952-aa53-da11a1cda4b6): create role userRole
INFO  : Semantic Analysis Completed (retrial = false)
INFO  : Returning Hive schema: Schema(fieldSchemas:null, properties:null)
INFO  : Completed compiling command(queryId=hive_20200320085236_d9a4f82e-dab8-4952-aa53-da11a1cda4b6); Time taken: 0.021 seconds
INFO  : Executing command(queryId=hive_20200320085236_d9a4f82e-dab8-4952-aa53-da11a1cda4b6): create role bdauserRole
INFO  : Starting task [Stage-0:DDL] in serial mode
ERROR : FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. createRole not implemented in FallbackHiveAuthorizer
INFO  : Completed executing command(queryId=hive_20200320085236_d9a4f82e-dab8-4952-aa53-da11a1cda4b6); Time taken: 0.02 seconds
Error: Error while processing statement: FAILED: Execution Error, return code 1 from org.apache.hadoop.hive.ql.exec.DDLTask. createRole not implemented in FallbackHiveAuthorizer (state=08S01,code=1)

Answer 1

作为错误状态，“ FallbackHiveAuthorizer中未实现的createRole”，它仅在存储层授权的基础上为HS2提供基本保护，请参阅here。您将需要安装支持细粒度RBAC的高级Hive授权插件（Ranger或Sentry）之一，才能使用SQL GRANT / REVOKE。