Please try to use full qualified name of host,  such as 
hive2/tempt48.hadoop....@hadoop.com

-----Original Message-----
From: Micro dong [mailto:microle.d...@gmail.com] 
Sent: Tuesday, October 18, 2016 2:37 PM
To: dev@hive.apache.org
Subject: Re: Start HiveServer2 with Kerberos meet FATAL error

I follow your suggestion and it also meet the same error too.

*start hiveservice*
/home/work/software/hive/bin/hive --service hiveserver2


*klist output*
Ticket cache: FILE:/tmp/krb5cc_31100
Default principal: hive2/temp...@hadoop.com

Valid starting     Expires            Service principal
10/18/16 14:23:04  10/19/16 14:23:04  krbtgt/hadoop....@hadoop.com renew until 
10/28/16 14:23:04

2016-10-18 12:07 GMT+08:00 Vivek Shrivastava <vivshrivast...@gmail.com>:

> can you please change this line
>
> <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>* with
> <value>hive2/_h...@hadoop.com</value>*
>
> How are you starting the service, What is the klist output?
>
>
> On Mon, Oct 17, 2016 at 11:09 PM, Micro dong <microle.d...@gmail.com>
> wrote:
>
> > I'm trying to configure HiveServer2(hive-1.2.1)  With Kerberos。Here 
> > is my Hive's configuration file。
> >  *<property>*
> > *    <name>hive.server2.authentication</name>*
> > *    <value>KERBEROS</value>*
> > *  </property>*
> > *  <property>*
> > *    <name>hive.server2.authentication.kerberos.principal</name>*
> > *    <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>*
> > *  </property>*
> > *  <property>*
> > *    <name>hive.server2.authentication.kerberos.keytab</name>*
> > *    <value>/home/work/software/hive/conf/hive.keytab</value>*
> > *  </property>*
> >
> > the keytab file is in its location, its owner is work. But when I 
> > try to start the HiveServer2, I see this message on the log:
> >
> > *2016-10-18 10:20:24,867 FATAL [Thread-9]: thrift.ThriftCLIService
> > (ThriftBinaryCLIService.java:run(101)) - Error starting HiveServer2:
> could
> > not start ThriftBinaryCLIService*
> > *javax.security.auth.login.LoginException: Kerberos principal should
> have
> > 3
> > parts: work**  at *
> > *org.apache.hive.service.auth.HiveAuthFactory.getAuthTransFactory(
> > HiveAuthFactory.java:147)*
> > *atorg.apache.hive.service.cli.thrift.ThriftBinaryCLIService.run(
> > ThriftBinaryCLIService.java:58)*
> > *at java.lang.Thread.run(Thread.java:722)*
> >
> > Here *work* is my unix login name. Any help would be highly appreciated.
> > Best regards
> >
>



--
英者自知,雄者自胜。

Reply via email to