[ https://issues.apache.org/jira/browse/HIVE-6799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14140444#comment-14140444 ]
LINTE commented on HIVE-6799: ----------------------------- I comment out hive.metastore.uris in the hive-site.xml and then restart hiveserver2 with embedded metastore and local derby database. I have many exception for each hive request from knox but it work. > HiveServer2 needs to map kerberos name to local name before proxy check > ----------------------------------------------------------------------- > > Key: HIVE-6799 > URL: https://issues.apache.org/jira/browse/HIVE-6799 > Project: Hive > Issue Type: Improvement > Components: HiveServer2 > Affects Versions: 0.13.1 > Reporter: Dilli Arumugam > Assignee: Dilli Arumugam > Fix For: 0.14.0 > > Attachments: HIVE-6799.1.patch, HIVE-6799.2.patch, HIVE-6799.patch > > > HiveServer2 does not map kerberos name of authenticated principal to local > name. > Due to this, I get error like the following in HiveServer log: > Failed to validate proxy privilage of knox/hdps.example.com for sam > I have KINITED as knox/hdps.example....@example.com > I do have the following in core-site.xml > <property> > <name>hadoop.proxyuser.knox.groups</name> > <value>users</value> > </property> > <property> > <name>hadoop.proxyuser.knox.hosts</name> > <value>*</value> > </property> -- This message was sent by Atlassian JIRA (v6.3.4#6332)