You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Josh Elser (JIRA)" <ji...@apache.org> on 2017/06/27 16:54:00 UTC

[jira] [Created] (HIVE-16973) Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in HS2

Josh Elser created HIVE-16973:
---------------------------------

             Summary: Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in HS2
                 Key: HIVE-16973
                 URL: https://issues.apache.org/jira/browse/HIVE-16973
             Project: Hive
          Issue Type: Bug
          Components: Accumulo Storage Handler
            Reporter: Josh Elser
            Assignee: Josh Elser


Had a report from a user that Kerberos+AccumuloStorageHandler+HS2 was broken. Looking into it, it seems like the bit-rot got pretty bad. You'll see something like the following:

{noformat}
Caused by: java.io.IOException: Failed to unwrap AuthenticationToken 
at org.apache.hadoop.hive.accumulo.HiveAccumuloHelper.unwrapAuthenticationToken(HiveAccumuloHelper.java:312) 
at org.apache.hadoop.hive.accumulo.mr.HiveAccumuloTableInputFormat.getSplits(HiveAccumuloTableInputFormat.java:122) 
{noformat}

It appears that some of the code-paths changed since when I first did my testing (or I just did poor testing) and the delegation token was never being fetched/serialized. There also are some issues with fetching the delegation token from Accumulo properly which were addressed in ACCUMULO-4665

I believe it would also be best to just update the dependency to use Accumulo 1.7 (drop 1.6 support) as it's lacking in this regard. These changes would otherwise get much more complicated with reflection -- Accumulo has moved on past 1.6, so let's do the same in Hive.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)