Rajkumar Singh created AMBARI-25511:
---------------------------------------

             Summary: hive auth fallback to SIMPLE because startup script fail 
to do kerberos login
                 Key: AMBARI-25511
                 URL: https://issues.apache.org/jira/browse/AMBARI-25511
             Project: Ambari
          Issue Type: Bug
            Reporter: Rajkumar Singh


There is problem with ambari startup script in secure environment, before 
starting the hiveserver2, it triggers the hadoop run jar 
(org.apache.hadoop.util.RunJar) where it authenticated himself using kerberos 
and push the credential to subject but this is not happening.  KrbLoginModule 
looks for a ticket in the cache and did not find it.

Failure of auth leads to failure of hdfs call until hive do loginfromkeytab 
explicitly.

 

I tried a small hack where I modified the startHiveserver2.sh.j2 template by 
including the knit with the service keytab and principal which works as 
expected.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to