Fwd: Exception while renewing a Delegation Token

[Manikumar <ma...@gmail.com>]

+dev

---------- Forwarded message ----------
From: Manikumar <ma...@gmail.com>
Date: Thu, Apr 27, 2017 at 6:19 PM
Subject: Exception while renewing a Delegation Token
To: user@hive.apache.org


Hi,

I am adding support to Storm Hive Bolt to access Hive meta-store using
delegation
tokens. I am able to create and cancel delegation tokens using HCatClient.
I am getting
below exception while renewing a delegation token.

Exception:
org.apache.hive.hcatalog.common.HCatException:
org.apache.hive.hcatalog.common.HCatException
: 9001 : Exception occurred while processing HCat request : MetaException
while renewing delegation token.. Cause : MetaException(message:hive/tes
t.cluster.com@EXAMPLE.COM tries to renew a token with renewer hive)
at org.apache.hive.hcatalog.api.HCatClientHMSImpl.renewDelegationToken(HCatClientHMSImpl.java:643)
~[hive-webhcat-java-client-0.14.0.jar:0.14.0]

Hadoop's AbstractDelegationTokenIdentifier sets the renewer to Kerberos
shortname
but HCatCleint.renewDelegationToken uses the fullName. This causes the
renewal to fail.

Relavent parts of code : https://github.com/apache/
hive/blob/master/shims/common/src/main/java/org/apache/hadoop/hive/thrift/
DelegationTokenSecretManager.java#L96

https://github.com/apache/hadoop/blob/trunk/hadoop-
common-project/hadoop-common/src/main/java/org/apache/hadoop/security/token/
delegation/AbstractDelegationTokenIdentifier.java#L105


Let me know If I am missing something. Is there any existing JIRA for this?


Thanks,
Manikumar