jxlfigored commented on issue #12766: URL: https://github.com/apache/seatunnel/issues/12766#issuecomment-6183639079
Thanks to both @DanielLeens and @CryoThrust for the analysis. We confirm we are using the official unmodified SeaTunnel 2.3.13 JAR (deployed at`/usr/hdp/3.3.1.0-004/seatunnel/` ), and the worker process does not obtain a Kerberos login outside the connector. Evidence that this is a Hudi connector bug, not an environment issue: 1. Same credentials work with Iceberg sink — we ran a test Iceberg job with the same`kerberos_principal` and`kerberos_keytab_path` , and it successfully wrote to HDFS (`/data/iceberg/warehouse/default/orders/` ). 2. Hudi fails with SIMPLE auth — the Hudi sink throws`SIMPLE authentication is not enabled. Available:[TOKEN, KERBEROS]` , indicating it never performed the keytab login. 3. No Kerberos login in worker logs — we checked`seatunnel-engine-worker.log` and found no`UserGroupInformation` or`loginUserFromKeytab` output for the Hudi job. 4. Source code confirms —`HudiSinkOptions` does not declare`use.kerberos` /`kerberos.principal` /`kerberos.principal.file` ,`HudiSinkConfig.of()` does not read them, and`HudiUtil.initKerberosAuthentication()` exists but is never called by`createHoodieJavaWriteClient()` . -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
