ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

CA TDM 4.8.X/4.9.x Data Masking Support for Hadoop - error: insufficient privileges to execute add (state=42000, code=0)

book

Article ID: 200497

calendar_today

Updated On:

Products

CA Test Data Manager (Data Finder / Grid Tools)

Issue/Introduction

We just finished installing the 2 jar files and hql file in our Hive environment.
We ran the command/statement, hive -i catdm-masker-init.hql but was not successful.

it produced error: insufficient privileges to execute add (state=42000, code=0).

We googled for answers, and it was telling us to use JAVA function to add this jar, https://issues.apache.org/jira/browse/SENTRY-147

Note: Our cluster is having Kerberos and Sentry enabled and the Kerberos ticket was renewed before running the command.

I have uploaded the screenshot from our environment for your investigation. Let us know if you need more info.

Cause

The error is expected when using the Add Jar function and Sentry Security is enabled.

Environment

TMD 4.9.x
FDM 4.9.x

Component: CA Test Data Manager

Resolution

no testing was done when implementing the solution for Hadoop while having the sentry component installed and configured.
So currently this is not supported.

In reviewing the like you provided it looks like the link provides you with the workaround your DBA should be able to use.

From the link:
Under Sentry you want an admin to inspect all Jars and then add them globally using hive.aux.jars.path.

Your DBA should understand how to allow this Jar file to be utilized by following the above process in the database.

 

You might also have your DBA review the following for alternative workarounds.
https://docs.cloudera.com/documentation/enterprise/5-6-x/topics/cm_mc_hive_udf.html

 

Attachments