You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ambari.apache.org by Margus Roo <ma...@roo.ee> on 2016/02/22 14:49:01 UTC
Pig view in kerberos cluster
Hi
I set up Pig view as
https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_ambari_views_guide/content/section_pig_view_kerberos_config.html
In ambari-server.log I get:
22 Feb 2016 15:26:08,889 INFO [qtp-client-24] JSONRequest:261 - curl -d
statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
doAs="margusja" -d
file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
22 Feb 2016 15:26:08,911 ERROR [qtp-client-24]
ServiceFormattedException:92 - java.lang.NullPointerException
22 Feb 2016 15:26:08,911 ERROR [qtp-client-24]
ServiceFormattedException:95 - java.lang.RuntimeException:
java.lang.NullPointerException
java.lang.RuntimeException: java.lang.NullPointerException
at
sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1454)
at
sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
at
sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:2978)
at
java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489)
at
org.apache.ambari.server.controller.internal.URLStreamProvider.processURL(URLStreamProvider.java:209)
at
org.apache.ambari.server.view.ViewURLStreamProvider.getHttpURLConnection(ViewURLStreamProvider.java:239)
at
org.apache.ambari.server.view.ViewURLStreamProvider.getInputStream(ViewURLStreamProvider.java:216)
at
org.apache.ambari.server.view.ViewURLStreamProvider.readFrom(ViewURLStreamProvider.java:103)
at
org.apache.ambari.server.view.ViewURLStreamProvider.readAs(ViewURLStreamProvider.java:117)
at
org.apache.ambari.view.pig.templeton.client.JSONRequest.readFrom(JSONRequest.java:273)
at
org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:117)
at
org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:128)
at
org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:96)
at
org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:103)
at
org.apache.ambari.view.pig.resources.jobs.JobResourceManager.submitJob(JobResourceManager.java:222)
at
org.apache.ambari.view.pig.resources.jobs.JobResourceManager.create(JobResourceManager.java:87)
at
org.apache.ambari.view.pig.resources.jobs.JobService.runJob(JobService.java:254)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at
com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
at
com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:205)
at
com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
at
com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302)
at
com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
at
com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
at
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1542)
at
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1473)
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1419)
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1409)
at
com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:409)
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:540)
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:715)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)
at
org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:684)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1496)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:330)
at
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:118)
at
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:84)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:103)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:45)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.apache.ambari.server.security.authorization.AmbariAuthorizationFilter.doFilter(AmbariAuthorizationFilter.java:182)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:150)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)
at
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
at
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237)
at
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
at
org.apache.ambari.server.api.MethodOverrideFilter.doFilter(MethodOverrideFilter.java:72)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
at
org.apache.ambari.server.api.AmbariPersistFilter.doFilter(AmbariPersistFilter.java:47)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
at
org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:82)
at
org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:294)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
at
org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:501)
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)
at
org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557)
at
org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)
at
org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)
at
org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:429)
at
org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)
at
org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
at
org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:209)
at
org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:198)
at
org.apache.ambari.server.controller.AmbariHandlerList.handle(AmbariHandlerList.java:132)
at
org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
at org.eclipse.jetty.server.Server.handle(Server.java:370)
at
org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:494)
at
org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:982)
at
org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1043)
at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:865)
at
org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240)
at
org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
at
org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:696)
at
org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:53)
at
org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608)
at
org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.NullPointerException
at java.util.Base64$Encoder.encode(Base64.java:261)
at java.util.Base64$Encoder.encodeToString(Base64.java:315)
at
sun.net.www.protocol.http.NegotiateAuthentication.setHeaders(NegotiateAuthentication.java:182)
at
sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1694)
at
sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
at
java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
... 97 more
If I do from command line:
[margusja@hadoopmgmt ~]$ curl -d
statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
doAs="margusja" -d
file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
<title>Error 401 Authentication required</title>
</head>
<body>
<h2>HTTP ERROR: 401</h2>
<p>Problem accessing /templeton/v1/pig. Reason:
<pre> Authentication required</pre></p>
<hr /><i><small>Powered by Jetty://</small></i>
</body>
</html>
[margusja@hadoopmgmt ~]$
But if I add --negotiate -u :
[margusja@hadoopmgmt ~]$ kinit
Password for margusja@TESTHADOOP.COM:
[margusja@hadoopmgmt ~]$ curl --negotiate -u : -d
statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
doAs="margusja" -d
file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
{"id":"job_1456134316547_0161"}[margusja@hadoopmgmt ~]$
WebHDFS Authentication: auth=KERBEROS;proxyuser=ambari-server (it works
in hive and hdfs views)
Any hints?
--
Margus (margusja) Roo
http://margus.roo.ee
skype: margusja
+372 51 48 780
Re: Pig view in kerberos cluster
Posted by Margus Roo <ma...@roo.ee>.
It works - my mistake. I put thous lines into HDFS conf :)
Margus (margusja) Roo
http://margus.roo.ee
skype: margusja
+372 51 48 780
On 22/02/16 16:11, Gaurav Nagar wrote:
> Hi Margus
>
> Can you check the following properties are present in custom webhcat-site section of hive services in Ambari.
>
> webhcat.proxyuser.<ambari server principal>.groups=*
> webhcat.proxyuser.<ambari server principal>.hosts=*
>
>
> http://docs.hortonworks.com/HDPDocuments/Ambari-2.2.0.0/bk_ambari_views_guide/content/_setup_WebHCat_proxy_user_pig_view.html
>
>
> Thanks
> Gaurav
>
>
>
>
> On 2/22/16, 7:19 PM, "Margus Roo" <ma...@roo.ee> wrote:
>
>> Hi
>>
>> I set up Pig view as
>> https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_ambari_views_guide/content/section_pig_view_kerberos_config.html
>>
>> In ambari-server.log I get:
>>
>> 22 Feb 2016 15:26:08,889 INFO [qtp-client-24] JSONRequest:261 - curl -d
>> statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
>> doAs="margusja" -d
>> file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
>> user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
>> 22 Feb 2016 15:26:08,911 ERROR [qtp-client-24]
>> ServiceFormattedException:92 - java.lang.NullPointerException
>> 22 Feb 2016 15:26:08,911 ERROR [qtp-client-24]
>> ServiceFormattedException:95 - java.lang.RuntimeException:
>> java.lang.NullPointerException
>>
>> java.lang.RuntimeException: java.lang.NullPointerException
>> at
>> sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1454)
>> at
>> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
>> at
>> sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:2978)
>> at
>> java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489)
>> at
>> org.apache.ambari.server.controller.internal.URLStreamProvider.processURL(URLStreamProvider.java:209)
>> at
>> org.apache.ambari.server.view.ViewURLStreamProvider.getHttpURLConnection(ViewURLStreamProvider.java:239)
>> at
>> org.apache.ambari.server.view.ViewURLStreamProvider.getInputStream(ViewURLStreamProvider.java:216)
>> at
>> org.apache.ambari.server.view.ViewURLStreamProvider.readFrom(ViewURLStreamProvider.java:103)
>> at
>> org.apache.ambari.server.view.ViewURLStreamProvider.readAs(ViewURLStreamProvider.java:117)
>> at
>> org.apache.ambari.view.pig.templeton.client.JSONRequest.readFrom(JSONRequest.java:273)
>> at
>> org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:117)
>> at
>> org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:128)
>> at
>> org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:96)
>> at
>> org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:103)
>> at
>> org.apache.ambari.view.pig.resources.jobs.JobResourceManager.submitJob(JobResourceManager.java:222)
>> at
>> org.apache.ambari.view.pig.resources.jobs.JobResourceManager.create(JobResourceManager.java:87)
>> at
>> org.apache.ambari.view.pig.resources.jobs.JobService.runJob(JobService.java:254)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>> at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>> at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>> at java.lang.reflect.Method.invoke(Method.java:497)
>> at
>> com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
>> at
>> com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:205)
>> at
>> com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
>> at
>> com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302)
>> at
>> com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
>> at
>> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>> at
>> com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
>> at
>> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>> at
>> com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
>> at
>> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>> at
>> com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
>> at
>> com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>> at
>> com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
>> at
>> com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1542)
>> at
>> com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1473)
>> at
>> com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1419)
>> at
>> com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1409)
>> at
>> com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:409)
>> at
>> com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:540)
>> at
>> com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:715)
>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)
>> at
>> org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:684)
>> at
>> org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1496)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:330)
>> at
>> org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:118)
>> at
>> org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:84)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:103)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:45)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.apache.ambari.server.security.authorization.AmbariAuthorizationFilter.doFilter(AmbariAuthorizationFilter.java:182)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:150)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
>> at
>> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>> at
>> org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)
>> at
>> org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
>> at
>> org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237)
>> at
>> org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
>> at
>> org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>> at
>> org.apache.ambari.server.api.MethodOverrideFilter.doFilter(MethodOverrideFilter.java:72)
>> at
>> org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>> at
>> org.apache.ambari.server.api.AmbariPersistFilter.doFilter(AmbariPersistFilter.java:47)
>> at
>> org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>> at
>> org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:82)
>> at
>> org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:294)
>> at
>> org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>> at
>> org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:501)
>> at
>> org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)
>> at
>> org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557)
>> at
>> org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)
>> at
>> org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)
>> at
>> org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:429)
>> at
>> org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)
>> at
>> org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)
>> at
>> org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
>> at
>> org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:209)
>> at
>> org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:198)
>> at
>> org.apache.ambari.server.controller.AmbariHandlerList.handle(AmbariHandlerList.java:132)
>> at
>> org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
>> at org.eclipse.jetty.server.Server.handle(Server.java:370)
>> at
>> org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:494)
>> at
>> org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:982)
>> at
>> org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1043)
>> at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:865)
>> at
>> org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240)
>> at
>> org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
>> at
>> org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:696)
>> at
>> org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:53)
>> at
>> org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608)
>> at
>> org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543)
>> at java.lang.Thread.run(Thread.java:745)
>> Caused by: java.lang.NullPointerException
>> at java.util.Base64$Encoder.encode(Base64.java:261)
>> at java.util.Base64$Encoder.encodeToString(Base64.java:315)
>> at
>> sun.net.www.protocol.http.NegotiateAuthentication.setHeaders(NegotiateAuthentication.java:182)
>> at
>> sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1694)
>> at
>> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
>> at
>> java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
>> ... 97 more
>>
>>
>> If I do from command line:
>> [margusja@hadoopmgmt ~]$ curl -d
>> statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
>> doAs="margusja" -d
>> file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
>> user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
>> <html>
>> <head>
>> <meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
>> <title>Error 401 Authentication required</title>
>> </head>
>> <body>
>> <h2>HTTP ERROR: 401</h2>
>> <p>Problem accessing /templeton/v1/pig. Reason:
>> <pre> Authentication required</pre></p>
>> <hr /><i><small>Powered by Jetty://</small></i>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> </body>
>> </html>
>> [margusja@hadoopmgmt ~]$
>>
>> But if I add --negotiate -u :
>> [margusja@hadoopmgmt ~]$ kinit
>> Password for margusja@TESTHADOOP.COM:
>> [margusja@hadoopmgmt ~]$ curl --negotiate -u : -d
>> statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
>> doAs="margusja" -d
>> file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
>> user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
>> {"id":"job_1456134316547_0161"}[margusja@hadoopmgmt ~]$
>>
>> WebHDFS Authentication: auth=KERBEROS;proxyuser=ambari-server (it works
>> in hive and hdfs views)
>>
>>
>> Any hints?
>>
>> --
>> Margus (margusja) Roo
>> http://margus.roo.ee
>> skype: margusja
>> +372 51 48 780
>>
>>
Re: Pig view in kerberos cluster
Posted by Gaurav Nagar <gn...@hortonworks.com>.
Hi Margus
Can you check the following properties are present in custom webhcat-site section of hive services in Ambari.
webhcat.proxyuser.<ambari server principal>.groups=*
webhcat.proxyuser.<ambari server principal>.hosts=*
http://docs.hortonworks.com/HDPDocuments/Ambari-2.2.0.0/bk_ambari_views_guide/content/_setup_WebHCat_proxy_user_pig_view.html
Thanks
Gaurav
On 2/22/16, 7:19 PM, "Margus Roo" <ma...@roo.ee> wrote:
>Hi
>
>I set up Pig view as
>https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_ambari_views_guide/content/section_pig_view_kerberos_config.html
>
>In ambari-server.log I get:
>
>22 Feb 2016 15:26:08,889 INFO [qtp-client-24] JSONRequest:261 - curl -d
>statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
>doAs="margusja" -d
>file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
>user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
>22 Feb 2016 15:26:08,911 ERROR [qtp-client-24]
>ServiceFormattedException:92 - java.lang.NullPointerException
>22 Feb 2016 15:26:08,911 ERROR [qtp-client-24]
>ServiceFormattedException:95 - java.lang.RuntimeException:
>java.lang.NullPointerException
>
>java.lang.RuntimeException: java.lang.NullPointerException
> at
>sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1454)
> at
>sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
> at
>sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:2978)
> at
>java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489)
> at
>org.apache.ambari.server.controller.internal.URLStreamProvider.processURL(URLStreamProvider.java:209)
> at
>org.apache.ambari.server.view.ViewURLStreamProvider.getHttpURLConnection(ViewURLStreamProvider.java:239)
> at
>org.apache.ambari.server.view.ViewURLStreamProvider.getInputStream(ViewURLStreamProvider.java:216)
> at
>org.apache.ambari.server.view.ViewURLStreamProvider.readFrom(ViewURLStreamProvider.java:103)
> at
>org.apache.ambari.server.view.ViewURLStreamProvider.readAs(ViewURLStreamProvider.java:117)
> at
>org.apache.ambari.view.pig.templeton.client.JSONRequest.readFrom(JSONRequest.java:273)
> at
>org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:117)
> at
>org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:128)
> at
>org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:96)
> at
>org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:103)
> at
>org.apache.ambari.view.pig.resources.jobs.JobResourceManager.submitJob(JobResourceManager.java:222)
> at
>org.apache.ambari.view.pig.resources.jobs.JobResourceManager.create(JobResourceManager.java:87)
> at
>org.apache.ambari.view.pig.resources.jobs.JobService.runJob(JobService.java:254)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
>sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at
>sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at
>com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
> at
>com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:205)
> at
>com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
> at
>com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302)
> at
>com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
> at
>com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
>com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
> at
>com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
>com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
> at
>com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
>com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
> at
>com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
> at
>com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
> at
>com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1542)
> at
>com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1473)
> at
>com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1419)
> at
>com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1409)
> at
>com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:409)
> at
>com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:540)
> at
>com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:715)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)
> at
>org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:684)
> at
>org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1496)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:330)
> at
>org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:118)
> at
>org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:84)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:103)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:45)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.apache.ambari.server.security.authorization.AmbariAuthorizationFilter.doFilter(AmbariAuthorizationFilter.java:182)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:150)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
> at
>org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
> at
>org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)
> at
>org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
> at
>org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237)
> at
>org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
> at
>org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
> at
>org.apache.ambari.server.api.MethodOverrideFilter.doFilter(MethodOverrideFilter.java:72)
> at
>org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
> at
>org.apache.ambari.server.api.AmbariPersistFilter.doFilter(AmbariPersistFilter.java:47)
> at
>org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
> at
>org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:82)
> at
>org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:294)
> at
>org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
> at
>org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:501)
> at
>org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)
> at
>org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557)
> at
>org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)
> at
>org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)
> at
>org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:429)
> at
>org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)
> at
>org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)
> at
>org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
> at
>org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:209)
> at
>org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:198)
> at
>org.apache.ambari.server.controller.AmbariHandlerList.handle(AmbariHandlerList.java:132)
> at
>org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
> at org.eclipse.jetty.server.Server.handle(Server.java:370)
> at
>org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:494)
> at
>org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:982)
> at
>org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1043)
> at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:865)
> at
>org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240)
> at
>org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
> at
>org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:696)
> at
>org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:53)
> at
>org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608)
> at
>org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543)
> at java.lang.Thread.run(Thread.java:745)
>Caused by: java.lang.NullPointerException
> at java.util.Base64$Encoder.encode(Base64.java:261)
> at java.util.Base64$Encoder.encodeToString(Base64.java:315)
> at
>sun.net.www.protocol.http.NegotiateAuthentication.setHeaders(NegotiateAuthentication.java:182)
> at
>sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1694)
> at
>sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
> at
>java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
> ... 97 more
>
>
>If I do from command line:
>[margusja@hadoopmgmt ~]$ curl -d
>statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
>doAs="margusja" -d
>file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
>user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
><html>
><head>
><meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
><title>Error 401 Authentication required</title>
></head>
><body>
><h2>HTTP ERROR: 401</h2>
><p>Problem accessing /templeton/v1/pig. Reason:
><pre> Authentication required</pre></p>
><hr /><i><small>Powered by Jetty://</small></i>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
></body>
></html>
>[margusja@hadoopmgmt ~]$
>
>But if I add --negotiate -u :
>[margusja@hadoopmgmt ~]$ kinit
>Password for margusja@TESTHADOOP.COM:
>[margusja@hadoopmgmt ~]$ curl --negotiate -u : -d
>statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d
>doAs="margusja" -d
>file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d
>user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"
>{"id":"job_1456134316547_0161"}[margusja@hadoopmgmt ~]$
>
>WebHDFS Authentication: auth=KERBEROS;proxyuser=ambari-server (it works
>in hive and hdfs views)
>
>
>Any hints?
>
>--
>Margus (margusja) Roo
>http://margus.roo.ee
>skype: margusja
>+372 51 48 780
>
>