This looks good. Please run this one and then try starting the service. kinit -kt /home/work/software/hive/conf/hive.keytab hive2/ temp...@hadoop.com
On Tue, Oct 18, 2016 at 10:16 PM, Micro dong <microle.d...@gmail.com> wrote: > [work@tempt48 ~]$ klist -ket /home/work/software/hive/conf/hive.keytab > Keytab name: FILE:/home/work/software/hive/conf/hive.keytab > KVNO Timestamp Principal > ---- ----------------- > -------------------------------------------------------- > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (aes128-cts-hmac-sha1-96) > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (des3-cbc-sha1) > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (arcfour-hmac) > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (des-hmac-sha1) > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (des-cbc-md5) > [work@tempt48 ~]$ hostname > tempt48 > [work@tempt48 ~]$ hostname -f > tempt48 > > > 2016-10-18 17:48 GMT+08:00 Vivek Shrivastava <vivshrivast...@gmail.com>: > > > What is the output of > > klist -ket /home/work/software/hive/conf/hive.keytab > > and > > hostname > > and > > hostname -f > > > > On Tue, Oct 18, 2016 at 4:18 AM, Micro dong <microle.d...@gmail.com> > > wrote: > > > > > tempt48 <tempt48.hadoop....@hadoop.com> is the local machine's > hostname > > > which is configured in /etc/hosts. > > > > > > 2016-10-18 15:33 GMT+08:00 Chen, Junjie J <junjie.j.c...@intel.com>: > > > > > > > Please try to use full qualified name of host, such as hive2/ > > > > tempt48.hadoop....@hadoop.com > > > > > > > > -----Original Message----- > > > > From: Micro dong [mailto:microle.d...@gmail.com] > > > > Sent: Tuesday, October 18, 2016 2:37 PM > > > > To: dev@hive.apache.org > > > > Subject: Re: Start HiveServer2 with Kerberos meet FATAL error > > > > > > > > I follow your suggestion and it also meet the same error too. > > > > > > > > *start hiveservice* > > > > /home/work/software/hive/bin/hive --service hiveserver2 > > > > > > > > > > > > *klist output* > > > > Ticket cache: FILE:/tmp/krb5cc_31100 > > > > Default principal: hive2/temp...@hadoop.com > > > > > > > > Valid starting Expires Service principal > > > > 10/18/16 14:23:04 10/19/16 14:23:04 krbtgt/hadoop....@hadoop.com > > renew > > > > until 10/28/16 14:23:04 > > > > > > > > 2016-10-18 12:07 GMT+08:00 Vivek Shrivastava < > vivshrivast...@gmail.com > > >: > > > > > > > > > can you please change this line > > > > > > > > > > <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>* with > > > > > <value>hive2/_h...@hadoop.com</value>* > > > > > > > > > > How are you starting the service, What is the klist output? > > > > > > > > > > > > > > > On Mon, Oct 17, 2016 at 11:09 PM, Micro dong < > microle.d...@gmail.com > > > > > > > > wrote: > > > > > > > > > > > I'm trying to configure HiveServer2(hive-1.2.1) With > Kerberos。Here > > > > > > is my Hive's configuration file。 > > > > > > *<property>* > > > > > > * <name>hive.server2.authentication</name>* > > > > > > * <value>KERBEROS</value>* > > > > > > * </property>* > > > > > > * <property>* > > > > > > * <name>hive.server2.authentication.kerberos. > principal</name>* > > > > > > * <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>* > > > > > > * </property>* > > > > > > * <property>* > > > > > > * <name>hive.server2.authentication.kerberos.keytab</name>* > > > > > > * <value>/home/work/software/hive/conf/hive.keytab</value>* > > > > > > * </property>* > > > > > > > > > > > > the keytab file is in its location, its owner is work. But when I > > > > > > try to start the HiveServer2, I see this message on the log: > > > > > > > > > > > > *2016-10-18 10:20:24,867 FATAL [Thread-9]: > thrift.ThriftCLIService > > > > > > (ThriftBinaryCLIService.java:run(101)) - Error starting > > HiveServer2: > > > > > could > > > > > > not start ThriftBinaryCLIService* > > > > > > *javax.security.auth.login.LoginException: Kerberos principal > > should > > > > > have > > > > > > 3 > > > > > > parts: work** at * > > > > > > *org.apache.hive.service.auth.HiveAuthFactory. > getAuthTransFactory( > > > > > > HiveAuthFactory.java:147)* > > > > > > *atorg.apache.hive.service.cli.thrift. > ThriftBinaryCLIService.run( > > > > > > ThriftBinaryCLIService.java:58)* > > > > > > *at java.lang.Thread.run(Thread.java:722)* > > > > > > > > > > > > Here *work* is my unix login name. Any help would be highly > > > > appreciated. > > > > > > Best regards > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > 英者自知，雄者自胜。 > > > > > > > > > > > > > > > > -- > > > 英者自知，雄者自胜。 > > > > > > > > > -- > 英者自知，雄者自胜。 >
