You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Sankar Hariappan (Jira)" <ji...@apache.org> on 2023/04/10 04:03:00 UTC
[jira] [Updated] (HIVE-22033) HiveServer2: fix delegation token renewal
[ https://issues.apache.org/jira/browse/HIVE-22033?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sankar Hariappan updated HIVE-22033:
------------------------------------
Fix Version/s: 3.2.0
> HiveServer2: fix delegation token renewal
> -----------------------------------------
>
> Key: HIVE-22033
> URL: https://issues.apache.org/jira/browse/HIVE-22033
> Project: Hive
> Issue Type: Bug
> Affects Versions: 2.3.5
> Reporter: Ion Alberdi
> Assignee: Ion Alberdi
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.2.0, 4.0.0-alpha-1
>
> Attachments: HIVE-22033.2.patch, HIVE-22033.patch
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Hello, the issue we faced (and a proposal for a fix) in our hive instances is depicted at
> [https://github.com/criteo-forks/hive/pull/24]
> Reading the master branch of the project
> [https://github.com/apache/hive/blob/master/standalone-metastore/metastore-server/src/main/java/org/apache/hadoop/hive/metastore/security/TokenStoreDelegationTokenSecretManager.java#L147]
> I think the same behavior is replicated there.
> Long story short, *TokenStoreDelegationTokenSecretManager.renewToken*, does not update the expiry date of a given token (as it does not get the updated DelegationTokenInformation from *super.currentTokens*).
> This makes any call to renewToken ineffective (the expiry date of the token is not postponed).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)