jxlfigored opened a new issue, #12766:
URL: https://github.com/apache/seatunnel/issues/12766

   ### Search before asking
   
   - [x] I had searched in the 
[issues](https://github.com/apache/seatunnel/issues?q=is%3Aissue+label%3A%22bug%22)
 and found no similar issues.
   
   
   ### What happened
   
   When using Hudi Sink in a Kerberos-enabled HDFS environment, the job fails 
with `Client cannot authenticate via:[TOKEN, KERBEROS]`.
   
   The same environment works correctly with **HdfsFile Sink** and **Iceberg 
Sink**. Only Hudi Sink fails.
   
   **Evidence:**
   
   1. **HdfsFile Sink** with the same Kerberos credentials writes to HDFS 
successfully.
   2. **Iceberg Sink** with the same Kerberos credentials writes to HDFS 
successfully.
   3. **Hudi Sink** fails with `Client cannot authenticate` in the worker 
thread.
   
   ### SeaTunnel Version
   
   2.3.13
   
   ### SeaTunnel Config
   
   ```conf
   env {
     parallelism = 1
     job.mode = "STREAMING"
     checkpoint.interval = 10000
   }
   
   source {
     MySQL-CDC {
       plugin_output = "orders_cdc"
       base-url = "jdbc:mysql://<mysql-host>:3306/seatunnel_test"
       username = "seatunnel"
       password = "***"
       table-names = ["seatunnel_test.orders"]
       startup.mode = "initial"
       debezium.skipped.operations = "d"
     }
   }
   
   sink {
     Hudi {
       plugin_input = "orders_cdc"
       table_dfs_path = "hdfs://<namenode>:8020/data/hudi/orders"
       database = "default"
       table_name = "orders"
       record_key_fields = "id"
       table_type = "COPY_ON_WRITE"
       op_type = "UPSERT"
       precombine_field = "created_at"
       conf_files_path = 
"/etc/hadoop/conf/core-site.xml;/etc/hadoop/conf/hdfs-site.xml;/etc/hadoop/conf/hive-site.xml"
       use.kerberos = true
       kerberos.principal = "seatunnel/<host>@<REALM>"
       kerberos.principal.file = 
"/etc/security/keytabs/seatunnel.service.keytab"
     }
   }
   ```
   
   ### Running Command
   
   ```shell
   ./bin/seatunnel.sh --config /path/to/config.conf -m cluster
   ```
   
   ### Error Exception
   
   ```log
   org.apache.hadoop.security.AccessControlException: Client cannot 
authenticate via:[TOKEN, KERBEROS]
       at 
org.apache.hadoop.security.SaslRpcClient.selectSaslClient(SaslRpcClient.java:173)
       at 
org.apache.seatunnel.connectors.seatunnel.hudi.sink.writer.HudiRecordWriter.executeWrite(HudiRecordWriter.java:169)
   ```
   
   ### Zeta or Flink or Spark Version
   
   _No response_
   
   ### Java or Scala Version
   
   Java 1.8.0_432
   
   ### Screenshots
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to