Getting started

[Roberta Marton <ro...@esgyn.com>]

I work on Apache Trafodion and have been asked to evaluate integration of Trafodion with Sentry.
My background includes supporting privileges for Trafodion and am very familiar with the basics of users, roles, privileges, and groups.
I read through much of the documentation from the Sentry site but have many questions.

First off, I wanted to just install Sentry and play with it a bit to see how things work.  I did install it through Cloudera manager but not sure how to proceed.
From reading the documentation, it looks like I should be able to run sentryShell and try creating some roles but sentryShell is not installed on my system.  I looked through existing documentation but could not find out how to install it.   Do I need Hive, Hue, or Impala in order to play with Sentry?  So, how does sentryShell get installed?

I plan to load some Hive tables and check out how the interface works between Hive and Sentry.  As part of Sentry install, does the Hive plug-in get installed or is there a separate step required for this.  I did notice that beeline was required.

I looked through the section on Kafka integration with Sentry found on the Sentry site but I would really like to see a more high level description on what is required to integrate with Sentry.  From a high level, it looks like I need to add a plug-in that calls some set of API's.  It also looks there they may be changes required in Sentry itself.  If there is some kind of check list and steps needed for this work, that would be helpful.

     Roberta

Re: Getting started

[Alexander Kolbasov <ak...@cloudera.com>]

Hi Roberta!

> On Dec 13, 2016, at 11:04 AM, Roberta Marton <ro...@esgyn.com> wrote:
> 
> I work on Apache Trafodion and have been asked to evaluate integration of Trafodion with Sentry.
> My background includes supporting privileges for Trafodion and am very familiar with the basics of users, roles, privileges, and groups.
> I read through much of the documentation from the Sentry site but have many questions.
> 
> First off, I wanted to just install Sentry and play with it a bit to see how things work.  I did install it through Cloudera manager but not sure how to proceed.
> From reading the documentation, it looks like I should be able to run sentryShell and try creating some roles but sentryShell is not installed on my system.  I looked through existing documentation but could not find out how to install it.   Do I need Hive, Hue, or Impala in order to play with Sentry?  So, how does sentryShell get installed?

The SentryShell is only available for Apache Sentry but not for CDH version Sentry. Usually people interact with Sentry with tools like Hive or Hue. I wrote a simple Sentry CLI (see https://github.com/akolb1/sentrytool <https://github.com/akolb1/sentrytool>) which works with any Sentry server - Apache or CDH. This is, probably, the easiest way to play with Sentry but it has one caveat - it doesn’t work in Kerberos environments.

- Alex