You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Butao Zhang (Jira)" <ji...@apache.org> on 2025/04/07 09:36:00 UTC

[jira] [Resolved] (HIVE-28797) Hive Delegation Token Renewal fails for any kerberos principal user other than hive user

     [ https://issues.apache.org/jira/browse/HIVE-28797?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Butao Zhang resolved HIVE-28797.
--------------------------------
    Fix Version/s: 4.1.0
       Resolution: Fixed

Merged to master branch.

Thanks [~vikramahuja_] for the fix!!!

Thanks  [~chinnalalam] for the review!

> Hive Delegation Token Renewal fails for any kerberos principal user other than hive user
> ----------------------------------------------------------------------------------------
>
>                 Key: HIVE-28797
>                 URL: https://issues.apache.org/jira/browse/HIVE-28797
>             Project: Hive
>          Issue Type: Bug
>    Affects Versions: 4.0.1
>            Reporter: Vikram Ahuja
>            Assignee: Vikram Ahuja
>            Priority: Major
>              Labels: hive-4.1.0-must, pull-request-available
>             Fix For: 4.1.0
>
>
> Hive Delegation Token Renewal fails for any user other than hive user post -HIVE-28042-
> In our production machine we are continuously observing errors like:
> {code:java}
> security.TokenStoreDelegationTokenSecretManager (TokenStoreDelegationTokenSecretManager.java: renewOrRemoveExpiredTokens) - Failed to renew token: HIVE_DELEGATION_TOKEN onwer=*****, renewer=***** realUser=*****@*****, issueDate=1740990243538, maxDate=1740992435438 sequenceNumber=13 masterKeyId=123 due to hive tries to renew a token (HIVE_DELEGATION_TOKEN onwer=*****, renewer=***** realUser=*****@*****, issueDate=1740990243538, maxDate=1740992435438 sequenceNumber=13 masterKeyId=123) with a non matching renewer *****{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)