MapR 5.0 Documentation : Integrate Hue with Sentry

As of Sentry 1.6, you can Integrate Hue with Sentry. Integrate Hue with Sentry when you want to use the Hue Security application to manage Sentry roles and privileges. When you integrate Hue with Sentry, Sentry must use the database storage model.  

Complete the following steps to integrate Hue with Sentry:

  1. In the [libsentry]  section of the hue.ini (/opt/mapr/hue/hue-<version>/desktop/conf/hue.ini), configure the following properties: 

    [libsentry] 
      # Hostname or IP of server. 
      hostname=localhost
     
      # Port the sentry service is running on. 
      port=8038 
     
      # Sentry configuration directory, where sentry-site.xml is located. 
      sentry_conf_dir=/opt/mapr/sentry/sentry-<version>/conf/sentry-site.xml
    
    
  2.  If Sentry uses Kerberos authentication, edit the following property in sentry-site.xml (/opt/mapr/sentry/sentry-<version>/conf/sentry-site.xml) to enable the Hue admin user (mapr) to connect to Sentry:

    <property>
        <name>sentry.service.allow.connect</name>
        <value>impala,hive,mapr</value>
    </property>
  3. Restart Hue:

    maprcli node services -name hue -action restart -nodes <ip_address>

The Hue user that manages Sentry roles and privileges in Hue must belong to a Hue group that is also part of the Sentry admin group.