how to integrate cloudera apache sentry with open ldap

Question

I have LDAP in my CDH 5.10 quick start VM for development and I have started the Sentry service within that.

Now I want to integrate Apache Sentry with LDAP.

Please let me know if that is even possible and if yes please guide me through the solution.

Answer 1

Yes, it's possible to integrate Sentry with LDAP.

The instructions can be found here:

• Configuring LDAP Group Mappings

• Using LDAP Username/Password Authentication with HiveServer2

• Enabling Sentry Authorization for Impala

• Configuring the Sentry Service

and some links that might be of help are:

• Need of disabling HiveServer2 Impersonation for sentry
• https://community.cloudera.com/t5/Batch-SQL-Apache-Hive/Sentry-integration-with-LDAP-Groups/td-p/8514
• https://community.cloudera.com/t5/Security-Apache-Sentry/sentry-ldap-hive-confuse/td-p/37062