CDH 中添加 Sentry 服务

1. 创建数据库

   create database sentry default character set utf8;  
   CREATE USER 'sentry'@'%' IDENTIFIED BY '123456';   
   GRANT ALL PRIVILEGES ON sentry. * TO 'sentry'@'%' IDENTIFIED BY '123456';   
   FLUSH PRIVILEGES;
   

   遇到问题：

   1396 - Operation CREATE USER failed for 'sentry'@'%'
   

   解决办法：

   先删除用户，再创建用户

   DROP USER 'sentry'@'%';
   

2. 添加 Sentry 服务

3. 配置Sentry Server 和 Gateway

   注意：
   这里只能为Sentry Server选择一个主机。添加Sentry服务完成后，可以在启用高可用性时添加其他主机。
   

4. 配置 Sentry 数据库
   

5. 初始化 Sentry 数据表并启动
   

6. 完成
   

7. 查看服务运行状态
   

8. 遇到的错误

   错误信息

   Error starting server
   java.lang.IllegalStateException: Could not create org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessorFactory
   	at org.apache.sentry.service.thrift.SentryService.runServer(SentryService.java:207)
   	at org.apache.sentry.service.thrift.SentryService.call(SentryService.java:168)
   	at org.apache.sentry.service.thrift.SentryService.call(SentryService.java:71)
   	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
   	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
   	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
   	at java.lang.Thread.run(Thread.java:748)
   Caused by: org.apache.sentry.provider.db.SentryNoSuchObjectException: No matching version found
   	at org.apache.sentry.provider.db.service.persistent.SentryStore$21.execute(SentryStore.java:1482)
   	at org.apache.sentry.provider.db.service.persistent.SentryStore$21.execute(SentryStore.java:1474)
   	at org.apache.sentry.provider.db.service.persistent.TransactionManager.executeTransaction(TransactionManager.java:111)
   	at org.apache.sentry.provider.db.service.persistent.SentryStore.getMSentryVersion(SentryStore.java:1473)
   	at org.apache.sentry.provider.db.service.persistent.SentryStore.getSentryVersion(SentryStore.java:1444)
   	at org.apache.sentry.provider.db.service.persistent.SentryStore.verifySentryStoreSchema(SentryStore.java:210)
   	at org.apache.sentry.provider.db.service.persistent.SentryStore.<init>(SentryStore.java:197)
   	at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessor.<init>(SentryPolicyStoreProcessor.java:104)
   	at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessorFactory.register(SentryPolicyStoreProcessorFactory.java:31)
   	at org.apache.sentry.service.thrift.SentryService.runServer(SentryService.java:201)
   	... 6 more
   

   解决办法

   Sentry -> 配置 -> 搜索 sentry-site.xml -> 保存更改 -> 重启 Sentry

   添加以下配置

   <property>
     <name>sentry.verify.schema.version</name>
     <value>false</value>
   </property>
   

   

参考：
Before You Install Sentry
Installing and Upgrading the Sentry Service