You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Mithun Radhakrishnan (JIRA)" <ji...@apache.org> on 2017/09/26 20:25:00 UTC

[jira] [Assigned] (HIVE-17609) Tool to manipulate delegation tokens

     [ https://issues.apache.org/jira/browse/HIVE-17609?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mithun Radhakrishnan reassigned HIVE-17609:
-------------------------------------------


> Tool to manipulate delegation tokens
> ------------------------------------
>
>                 Key: HIVE-17609
>                 URL: https://issues.apache.org/jira/browse/HIVE-17609
>             Project: Hive
>          Issue Type: Improvement
>          Components: Metastore, Security
>    Affects Versions: 2.2.0, 3.0.0
>            Reporter: Mithun Radhakrishnan
>            Assignee: Mithun Radhakrishnan
>
> This was precipitated by OOZIE-2797. We had a case in production where the number of active metastore delegation tokens outstripped the ZooKeeper {{jute.maxBuffer}} size. Delegation tokens could neither be fetched, nor be cancelled. 
> The root-cause turned out to be a miscommunication, causing delegation tokens fetched by Oozie *not* to be cancelled automatically from HCat. This was sorted out as part of OOZIE-2797.
> The issue exposed how poor the log-messages were, in the code pertaining to token fetch/cancellation. We also found need for a tool to query/list/purge delegation tokens that might have expired already. This patch introduces such a tool, and improves the log-messages.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)