CDH 中添加 Sentry 服务

一时失言乱红尘 2022-10-01 10:48 202阅读 0赞

1.  **创建数据库**
    
        create database sentry default character set utf8;  
        CREATE USER 'sentry'@'%' IDENTIFIED BY '123456'; GRANT ALL PRIVILEGES ON sentry. * TO 'sentry'@'%' IDENTIFIED BY '123456';   
        FLUSH PRIVILEGES;
    
    遇到问题：
    
        1396 - Operation CREATE USER failed for 'sentry'@'%'
    
    解决办法：
    
    先删除用户，再创建用户
    
        DROP USER 'sentry'@'%';
2.  **添加 Sentry 服务**![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70]
3.  **配置Sentry Server 和 Gateway**
    
    **注意：**  
    这里只能为Sentry Server选择一个主机。添加Sentry服务完成后，可以在启用高可用性时添加其他主机。  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 1]
4.  **配置 Sentry 数据库**  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 2]
5.  **初始化 Sentry 数据表并启动**  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 3]
6.  **完成**  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 4]
7.  **查看服务运行状态**  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 5]
8.  **遇到的错误**
    
    **错误信息**
    
        Error starting server
        java.lang.IllegalStateException: Could not create org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessorFactory
        	at org.apache.sentry.service.thrift.SentryService.runServer(SentryService.java:207)
        	at org.apache.sentry.service.thrift.SentryService.call(SentryService.java:168)
        	at org.apache.sentry.service.thrift.SentryService.call(SentryService.java:71)
        	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        	at java.lang.Thread.run(Thread.java:748)
        Caused by: org.apache.sentry.provider.db.SentryNoSuchObjectException: No matching version found
        	at org.apache.sentry.provider.db.service.persistent.SentryStore$21.execute(SentryStore.java:1482)
        	at org.apache.sentry.provider.db.service.persistent.SentryStore$21.execute(SentryStore.java:1474)
        	at org.apache.sentry.provider.db.service.persistent.TransactionManager.executeTransaction(TransactionManager.java:111)
        	at org.apache.sentry.provider.db.service.persistent.SentryStore.getMSentryVersion(SentryStore.java:1473)
        	at org.apache.sentry.provider.db.service.persistent.SentryStore.getSentryVersion(SentryStore.java:1444)
        	at org.apache.sentry.provider.db.service.persistent.SentryStore.verifySentryStoreSchema(SentryStore.java:210)
        	at org.apache.sentry.provider.db.service.persistent.SentryStore.<init>(SentryStore.java:197)
        	at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessor.<init>(SentryPolicyStoreProcessor.java:104)
        	at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessorFactory.register(SentryPolicyStoreProcessorFactory.java:31)
        	at org.apache.sentry.service.thrift.SentryService.runServer(SentryService.java:201)
        	... 6 more
    
    **解决办法**
    
    Sentry -> 配置 -> 搜索 sentry-site.xml -> 保存更改 -> 重启 Sentry
    
    添加以下配置
    
        <property>
          <name>sentry.verify.schema.version</name>
          <value>false</value>
        </property>
    
    ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 6][]

参考：  
[Before You Install Sentry][]  
[Installing and Upgrading the Sentry Service][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70]: /images/20220118/7eaab69d4d8f45768581f280c80614f7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 1]: /images/20220118/e9e3c35d5ecd41dc97aea742f7218ad0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 2]: /images/20220118/e303ff01043d44f383a63fb35da8ac64.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 3]: /images/20220118/7d96e436505f4a4da53baca7de8d1249.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 4]: /images/20220118/5d3391a31c54432aaa64e472a8ea72a9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 5]: /images/20220118/faeb0eb7ab1e46eabf3d4342c3decc7a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzIxNTI1MA_size_16_color_FFFFFF_t_70 6]: /images/20220118/69710613b0f34f10a24643f8a490c59f.png
[Before You Install Sentry]: https://www.cloudera.com/documentation/enterprise/latest/topics/sg_sentry_before_you_install.html
[Installing and Upgrading the Sentry Service]: https://www.cloudera.com/documentation/enterprise/latest/topics/sg_sentry_service_install.html