sentry配置与使用

1.解压
tar zxvf apache-sentry-2.1.0-bin.tar.gz
2.准备
mysql构建数据库sentry
3.配置
cd sentry-2.1.0/
cd conf
vi sentry-site.xml

<configuration>
  <property>
    <name>sentry.hive.server</name>
    <value>110.188.1.86</value>
  </property>
  <property>
    <name>sentry.store.jdbc.url</name>
    <value>jdbc:mysql://110.188.0.54:3306/sentry</value>
  </property>
  <property>
    <name>sentry.service.security.mode</name>
    <value>none</value>
  </property>
  <property>
    <name>sentry.service.web.enable</name>
    <value>true</value>
    <description>Enable web service</description>
  </property>
  <property>
    <name>sentry.service.web.authentication.type</name>
    <value>NONE</value>
    <description>Options: kerberos, NONE.  Authentication mode for Sentry web service.</description>
  </property>
  <property>
    <name>sentry.service.web.authentication.kerberos.keytab</name>
    <value></value>
    <description>Keytab for web service principal</description>
  </property>
  <property>
    <name>sentry.service.web.authentication.kerberos.principal</name>
    <value></value>
    <description>Web service Kerberos principal</description>
  </property>
  <property>
    <name>sentry.service.web.authentication.allow.connect.users</name>
    <value></value>
    <description>comma separated list of users - List of users that are allowed to connect to the web service (eg Hive, Impala) </description>
  </property>
  <property>
    <name>sentry.service.server.principal</name>
    <value></value>
  </property>
  <property>
    <name>sentry.service.server.keytab</name>
    <value></value>
  </property>
  <property>
    <name>sentry.service.server.rpc-port</name>
    <value>8838</value>
  </property>
  <property>
    <name>sentry.service.server.rpc-address</name>
    <value>110.188.1.86</value>
  </property>
  <property>
    <name>sentry.service.admin.group</name>
    <value>hive,hue,hdfs</value>
  </property>
  <property>
    <name>sentry.store.group.mapping</name>
    <value>org.apache.sentry.provider.common.HadoopGroupMappingService</value>
  </property>
  <property>
    <name>sentry.service.allow.connect</name>
    <value>hive,hue,hdfs</value>
  </property>
  <property>
    <name>sentry.store.jdbc.driver</name>
    <value>com.mysql.jdbc.Driver</value>
  </property>
  <property>
    <name>sentry.store.jdbc.user</name>
    <value>sentry</value>
  </property>
  <property>
    <name>sentry.store.jdbc.password</name>
    <value>sentry</value>
  </property>
  <property>
    <name>sentry.verify.schema.version</name>
    <value>true</value>
  </property>
</configuration>
4. 增加依赖
cd ../lib
+mysql-connector-java-5.1.48-bin.jar
5. 启动服务
nohup sentry --command service --conffile conf/sentry-site.xml &
6. 检查服务
ps -ef|grep sentry
7. hive支持
cp lib/sentry-* /home/user/hive238/lib/
cp conf/sentry-site.xml /home/user/hive238/conf/