Please try to use full qualified name of host, such as hive2/tempt48.hadoop....@hadoop.com
-----Original Message----- From: Micro dong [mailto:microle.d...@gmail.com] Sent: Tuesday, October 18, 2016 2:37 PM To: dev@hive.apache.org Subject: Re: Start HiveServer2 with Kerberos meet FATAL error I follow your suggestion and it also meet the same error too. *start hiveservice* /home/work/software/hive/bin/hive --service hiveserver2 *klist output* Ticket cache: FILE:/tmp/krb5cc_31100 Default principal: hive2/temp...@hadoop.com Valid starting Expires Service principal 10/18/16 14:23:04 10/19/16 14:23:04 krbtgt/hadoop....@hadoop.com renew until 10/28/16 14:23:04 2016-10-18 12:07 GMT+08:00 Vivek Shrivastava <vivshrivast...@gmail.com>: > can you please change this line > > <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>* with > <value>hive2/_h...@hadoop.com</value>* > > How are you starting the service, What is the klist output? > > > On Mon, Oct 17, 2016 at 11:09 PM, Micro dong <microle.d...@gmail.com> > wrote: > > > I'm trying to configure HiveServer2(hive-1.2.1) With Kerberos。Here > > is my Hive's configuration file。 > > *<property>* > > * <name>hive.server2.authentication</name>* > > * <value>KERBEROS</value>* > > * </property>* > > * <property>* > > * <name>hive.server2.authentication.kerberos.principal</name>* > > * <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>* > > * </property>* > > * <property>* > > * <name>hive.server2.authentication.kerberos.keytab</name>* > > * <value>/home/work/software/hive/conf/hive.keytab</value>* > > * </property>* > > > > the keytab file is in its location, its owner is work. But when I > > try to start the HiveServer2, I see this message on the log: > > > > *2016-10-18 10:20:24,867 FATAL [Thread-9]: thrift.ThriftCLIService > > (ThriftBinaryCLIService.java:run(101)) - Error starting HiveServer2: > could > > not start ThriftBinaryCLIService* > > *javax.security.auth.login.LoginException: Kerberos principal should > have > > 3 > > parts: work** at * > > *org.apache.hive.service.auth.HiveAuthFactory.getAuthTransFactory( > > HiveAuthFactory.java:147)* > > *atorg.apache.hive.service.cli.thrift.ThriftBinaryCLIService.run( > > ThriftBinaryCLIService.java:58)* > > *at java.lang.Thread.run(Thread.java:722)* > > > > Here *work* is my unix login name. Any help would be highly appreciated. > > Best regards > > > -- 英者自知,雄者自胜。