You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@hive.apache.org by ameet chaubal <am...@yahoo.com> on 2012/05/18 19:56:47 UTC

SASL and kerberos principal

Hi all,

I am trying to make SASL work with hive.
it is enabled via 
hive.metastore.sasl.enabled = true

hive.metastore.kerberos.keytab.file=/etc/hive/conf/hive.keytab

hive.metastore.kerberos.principal = hive/cdh4.ec2.internal@EC2.INTERNAL


I have checked the keytab and looks ok,
[root@cdh4 hive]# ktutil
ktutil:   rkt /etc/hive/conf/hive.keytab
ktutil:  list -e
slot KVNO Principal
---- ---- ---------------------------------------------------------------------
   1    4      hive/cdh4.ec2.internal@EC2.INTERNAL (Triple DES cbc mode with HMAC/sha1)
   2    4      hive/cdh4.ec2.internal@EC2.INTERNAL (DES cbc mode with CRC-32)

however, starting hive --service metastore, I get an error:

org.apache.thrift.transport.TTransportException: Kerberos principal should have 3 parts:

My principal, as shown above, does have 3 parts - 1.hive , 2.FQDN, 3.REALM

What's missing here?
 
thanks

Sincerely,


Ameet