ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Swapan Shridhar (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-20947) Use keytab file named 'hive.service.keytab' instead of 'hive.llap.zk.sm.keytab' in hive_server_interactive.py for copying to slider.
Date Wed, 10 May 2017 21:06:04 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-20947?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Swapan Shridhar updated AMBARI-20947:
-------------------------------------
    Attachment: AMBARI-20947.1.patch

> Use keytab file named 'hive.service.keytab' instead of 'hive.llap.zk.sm.keytab' in hive_server_interactive.py
for copying to slider.
> ------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-20947
>                 URL: https://issues.apache.org/jira/browse/AMBARI-20947
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: trunk, 2.5.0
>            Reporter: Swapan Shridhar
>            Assignee: Swapan Shridhar
>            Priority: Blocker
>             Fix For: trunk, 2.5.1
>
>         Attachments: AMBARI-20947.1.patch, AMBARI-20947.patch
>
>
> *Issue:* 
> HSI server start failed with "kinit: Key table file '/etc/security/keytabs/hive.llap.zk.sm.keytab'
not found while getting initial credentials".
> *Reason:* 
> This can happen when HSI is placed on a node where YARN's NodeManager node doesn't exists.
Thus, 'hive.llap.zk.sm.keytab' file wont get generated.
> *Fix:*
> Following are the principals in both keytab files:
> {code}
> [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# klist -kt hive.service.keytab
> Keytab name: FILE:hive.service.keytab
> KVNO Timestamp         Principal
> ---- ----------------- --------------------------------------------------------
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
> [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# 
> [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# klist -kt hive.llap.zk.sm.keytab

> Keytab name: FILE:hive.llap.zk.sm.keytab
> KVNO Timestamp         Principal
> ---- ----------------- --------------------------------------------------------
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
>    2 05/03/17 20:57:16 hive/ctr-e133-1493418528701-3077-01-000003.hwx.site@EXAMPLE.COM
> [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# 
> {code}
> Given that *'hive.service.keytab'* and *'hive.llap.zk.sm.keytab'* contains the same principals,
we can use 'hive.service.keytab'  for copying principals to slider in HDFS.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message