You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ambari.apache.org by "Dmitry Lysnichenko (Jira)" <ji...@apache.org> on 2020/06/09 11:59:00 UTC

[jira] [Commented] (AMBARI-25511) hive auth fallback to SIMPLE because startup script fail to do kerberos login

    [ https://issues.apache.org/jira/browse/AMBARI-25511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17129191#comment-17129191 ] 

Dmitry Lysnichenko commented on AMBARI-25511:
---------------------------------------------

The issue here is that stack_features.json contains a max version for the hive_server2_kerberized_env variable. That's why kinit is skipped on a newer stack version

> hive auth fallback to SIMPLE because startup script fail to do kerberos login
> -----------------------------------------------------------------------------
>
>                 Key: AMBARI-25511
>                 URL: https://issues.apache.org/jira/browse/AMBARI-25511
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Rajkumar Singh
>            Assignee: Dmitry Lysnichenko
>            Priority: Major
>
> There is problem with ambari startup script in secure environment, before starting the hiveserver2, it triggers the hadoop run jar (org.apache.hadoop.util.RunJar) where it authenticated himself using kerberos and push the credential to subject but this is not happening.  KrbLoginModule looks for a ticket in the cache and did not find it.
> Failure of auth leads to failure of hdfs call until hive do loginfromkeytab explicitly.
>  
> I tried a small hack where I modified the startHiveserver2.sh.j2 template by including the knit with the service keytab and principal which works as expected.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)