It seems to me it's trying to login into HiveServer with unix username instead of Kerberos keytab
2016-10-19 10:30 GMT+08:00 Micro dong <microle.d...@gmail.com>: > it also meet the same error too. > > *2016-10-19 10:28:07,300 FATAL [Thread-9]: thrift.ThriftCLIService > (ThriftBinaryCLIService.java:run(101)) - Error starting HiveServer2: could > not start ThriftBinaryCLIService* > *javax.security.auth.login.LoginException: Kerberos principal should have > 3 parts: work* > * at > org.apache.hive.service.auth.HiveAuthFactory.getAuthTransFactory(HiveAuthFactory.java:147)* > * at > org.apache.hive.service.cli.thrift.ThriftBinaryCLIService.run(ThriftBinaryCLIService.java:58)* > * at java.lang.Thread.run(Thread.java:722)* > > 2016-10-19 10:22 GMT+08:00 Vivek Shrivastava <vivshrivast...@gmail.com>: > >> This looks good. Please run this one and then try starting the service. >> >> kinit -kt /home/work/software/hive/conf/hive.keytab hive2/ >> temp...@hadoop.com >> >> >> On Tue, Oct 18, 2016 at 10:16 PM, Micro dong <microle.d...@gmail.com> >> wrote: >> >> > [work@tempt48 ~]$ klist -ket /home/work/software/hive/conf/hive.keytab >> > Keytab name: FILE:/home/work/software/hive/conf/hive.keytab >> > KVNO Timestamp Principal >> > ---- ----------------- >> > -------------------------------------------------------- >> > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com >> (aes128-cts-hmac-sha1-96) >> > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (des3-cbc-sha1) >> > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (arcfour-hmac) >> > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (des-hmac-sha1) >> > 2 10/12/16 15:31:57 hive2/temp...@hadoop.com (des-cbc-md5) >> > [work@tempt48 ~]$ hostname >> > tempt48 >> > [work@tempt48 ~]$ hostname -f >> > tempt48 >> > >> > >> > 2016-10-18 17:48 GMT+08:00 Vivek Shrivastava <vivshrivast...@gmail.com >> >: >> > >> > > What is the output of >> > > klist -ket /home/work/software/hive/conf/hive.keytab >> > > and >> > > hostname >> > > and >> > > hostname -f >> > > >> > > On Tue, Oct 18, 2016 at 4:18 AM, Micro dong <microle.d...@gmail.com> >> > > wrote: >> > > >> > > > tempt48 <tempt48.hadoop....@hadoop.com> is the local machine's >> > hostname >> > > > which is configured in /etc/hosts. >> > > > >> > > > 2016-10-18 15:33 GMT+08:00 Chen, Junjie J <junjie.j.c...@intel.com >> >: >> > > > >> > > > > Please try to use full qualified name of host, such as hive2/ >> > > > > tempt48.hadoop....@hadoop.com >> > > > > >> > > > > -----Original Message----- >> > > > > From: Micro dong [mailto:microle.d...@gmail.com] >> > > > > Sent: Tuesday, October 18, 2016 2:37 PM >> > > > > To: dev@hive.apache.org >> > > > > Subject: Re: Start HiveServer2 with Kerberos meet FATAL error >> > > > > >> > > > > I follow your suggestion and it also meet the same error too. >> > > > > >> > > > > *start hiveservice* >> > > > > /home/work/software/hive/bin/hive --service hiveserver2 >> > > > > >> > > > > >> > > > > *klist output* >> > > > > Ticket cache: FILE:/tmp/krb5cc_31100 >> > > > > Default principal: hive2/temp...@hadoop.com >> > > > > >> > > > > Valid starting Expires Service principal >> > > > > 10/18/16 14:23:04 10/19/16 14:23:04 krbtgt/ >> hadoop....@hadoop.com >> > > renew >> > > > > until 10/28/16 14:23:04 >> > > > > >> > > > > 2016-10-18 12:07 GMT+08:00 Vivek Shrivastava < >> > vivshrivast...@gmail.com >> > > >: >> > > > > >> > > > > > can you please change this line >> > > > > > >> > > > > > <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>* with >> > > > > > <value>hive2/_h...@hadoop.com</value>* >> > > > > > >> > > > > > How are you starting the service, What is the klist output? >> > > > > > >> > > > > > >> > > > > > On Mon, Oct 17, 2016 at 11:09 PM, Micro dong < >> > microle.d...@gmail.com >> > > > >> > > > > > wrote: >> > > > > > >> > > > > > > I'm trying to configure HiveServer2(hive-1.2.1) With >> > Kerberos。Here >> > > > > > > is my Hive's configuration file。 >> > > > > > > *<property>* >> > > > > > > * <name>hive.server2.authentication</name>* >> > > > > > > * <value>KERBEROS</value>* >> > > > > > > * </property>* >> > > > > > > * <property>* >> > > > > > > * <name>hive.server2.authentication.kerberos. >> > principal</name>* >> > > > > > > * <value>hive2/_h...@hadoop.com <h...@hadoop.com></value>* >> > > > > > > * </property>* >> > > > > > > * <property>* >> > > > > > > * <name>hive.server2.authenticat >> ion.kerberos.keytab</name>* >> > > > > > > * <value>/home/work/software/hiv >> e/conf/hive.keytab</value>* >> > > > > > > * </property>* >> > > > > > > >> > > > > > > the keytab file is in its location, its owner is work. But >> when I >> > > > > > > try to start the HiveServer2, I see this message on the log: >> > > > > > > >> > > > > > > *2016-10-18 10:20:24,867 FATAL [Thread-9]: >> > thrift.ThriftCLIService >> > > > > > > (ThriftBinaryCLIService.java:run(101)) - Error starting >> > > HiveServer2: >> > > > > > could >> > > > > > > not start ThriftBinaryCLIService* >> > > > > > > *javax.security.auth.login.LoginException: Kerberos principal >> > > should >> > > > > > have >> > > > > > > 3 >> > > > > > > parts: work** at * >> > > > > > > *org.apache.hive.service.auth.HiveAuthFactory. >> > getAuthTransFactory( >> > > > > > > HiveAuthFactory.java:147)* >> > > > > > > *atorg.apache.hive.service.cli.thrift. >> > ThriftBinaryCLIService.run( >> > > > > > > ThriftBinaryCLIService.java:58)* >> > > > > > > *at java.lang.Thread.run(Thread.java:722)* >> > > > > > > >> > > > > > > Here *work* is my unix login name. Any help would be highly >> > > > > appreciated. >> > > > > > > Best regards >> > > > > > > >> > > > > > >> > > > > >> > > > > >> > > > > >> > > > > -- >> > > > > 英者自知，雄者自胜。 >> > > > > >> > > > >> > > > >> > > > >> > > > -- >> > > > 英者自知，雄者自胜。 >> > > > >> > > >> > >> > >> > >> > -- >> > 英者自知，雄者自胜。 >> > >> > > > > -- > 英者自知，雄者自胜。 > -- 英者自知，雄者自胜。
