MapR 5.0 Documentation : Integrating Sentry

Integrate Sentry with other ecosystem components to enable those components to use Sentry authorization. You can also integrate Sentry with Hue in order to use the Hue Security application to manage Sentry privileges and roles.

You can configure Sentry to provide authorization in the following scenarios: 

Sentry Version

Sentry Storage Mode

Component Integration

Cluster Security

1.6.0

 

Database

Impala 2.2.0 and Hive 1.2.1

Insecure cluster

Secure cluster with Kerberos authentication

Sqoop2

Secure cluster with Kerberos authentication

File-Based

Impala 2.2.0 and Hive 1.2.1

Insecure cluster

Secure cluster with Kerberos authentication

1.4.0

File-Based

Impala 1.4.1 and Hive 0.13

Insecure cluster

Secure cluster without Kerberos authentication for Hive

Important Notes

  • When you configure Impala to use Sentry authorization, Impala and Hive both must use Sentry for authentication. Also, impersonation cannot be enabled for Hive.
  • For clusters with Hive but not Impala, authorization can be implemented using Hive’s native authorization mechanisms;Sentry is not needed.