+dev ---------- Forwarded message ---------- From: Manikumar <manikumar.re...@gmail.com> Date: Thu, Apr 27, 2017 at 6:19 PM Subject: Exception while renewing a Delegation Token To: u...@hive.apache.org
Hi, I am adding support to Storm Hive Bolt to access Hive meta-store using delegation tokens. I am able to create and cancel delegation tokens using HCatClient. I am getting below exception while renewing a delegation token. Exception: org.apache.hive.hcatalog.common.HCatException: org.apache.hive.hcatalog.common.HCatException : 9001 : Exception occurred while processing HCat request : MetaException while renewing delegation token.. Cause : MetaException(message:hive/tes t.cluster....@example.com tries to renew a token with renewer hive) at org.apache.hive.hcatalog.api.HCatClientHMSImpl.renewDelegationToken(HCatClientHMSImpl.java:643) ~[hive-webhcat-java-client-0.14.0.jar:0.14.0] Hadoop's AbstractDelegationTokenIdentifier sets the renewer to Kerberos shortname but HCatCleint.renewDelegationToken uses the fullName. This causes the renewal to fail. Relavent parts of code : https://github.com/apache/ hive/blob/master/shims/common/src/main/java/org/apache/hadoop/hive/thrift/ DelegationTokenSecretManager.java#L96 https://github.com/apache/hadoop/blob/trunk/hadoop- common-project/hadoop-common/src/main/java/org/apache/hadoop/security/token/ delegation/AbstractDelegationTokenIdentifier.java#L105 Let me know If I am missing something. Is there any existing JIRA for this? Thanks, Manikumar
