Return-Path: X-Original-To: apmail-hadoop-user-archive@minotaur.apache.org Delivered-To: apmail-hadoop-user-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 390981856A for ; Tue, 24 Nov 2015 12:17:21 +0000 (UTC) Received: (qmail 34802 invoked by uid 500); 24 Nov 2015 12:17:15 -0000 Delivered-To: apmail-hadoop-user-archive@hadoop.apache.org Received: (qmail 34691 invoked by uid 500); 24 Nov 2015 12:17:15 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hadoop.apache.org Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 34448 invoked by uid 99); 24 Nov 2015 12:17:14 -0000 Received: from Unknown (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 24 Nov 2015 12:17:14 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 71D811A4206 for ; Tue, 24 Nov 2015 12:17:14 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.152 X-Spam-Level: *** X-Spam-Status: No, score=3.152 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=3, URIBL_BLOCKED=0.001, WEIRD_PORT=0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-eu-west.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id VqhZDRm9Fd0x for ; Tue, 24 Nov 2015 12:17:01 +0000 (UTC) Received: from mail-oi0-f45.google.com (mail-oi0-f45.google.com [209.85.218.45]) by mx1-eu-west.apache.org (ASF Mail Server at mx1-eu-west.apache.org) with ESMTPS id 6208F25E49 for ; Tue, 24 Nov 2015 12:17:00 +0000 (UTC) Received: by oiww189 with SMTP id w189so8450929oiw.3 for ; Tue, 24 Nov 2015 04:16:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=no3WoNuMrRdwWhnmQOjGWEetScK8ShBSTAYeS+p8hXU=; b=drR31tl59DV2uWKrPxrhk2g9g0Rn/PPMMQdLbN3sMxKeRKvReANc/Z6O8W46ImwLhb Bz9FRMZfkFgrzg+4Z1+REaoBciGgHWPTBaYwBvBbN7cnAfADznDBjRO6weH6OjbRniCD qDHsfTwc0eVPXj//lSKl3Klk8bdnkJCPqYN1Oh441cJzRzx01Lp6iF0R2xj3s/hzPEMv 3wanqhGxQQ6iIRFrf05r9hpdwevqV5RMMXLE+C3SZZ3Vv8p9pYULUR0mrWouWKl2Akjb pOAEbarF5TlmXZDfWDLXOf8YG6s8SnBbJcbxQb2SwRxcsOrKRFDv3Q1LqRc/pifwT7Nb yCNA== MIME-Version: 1.0 X-Received: by 10.202.75.18 with SMTP id y18mr19578744oia.98.1448367419274; Tue, 24 Nov 2015 04:16:59 -0800 (PST) Received: by 10.202.68.65 with HTTP; Tue, 24 Nov 2015 04:16:59 -0800 (PST) In-Reply-To: References: Date: Tue, 24 Nov 2015 07:16:59 -0500 Message-ID: Subject: Re: Unable to connect to beeline after kerberos is installed From: Kumar Jayapal To: user@hive.apache.org Cc: user@hadoop.apache.org Content-Type: multipart/alternative; boundary=001a11c15ed287b8db0525485151 --001a11c15ed287b8db0525485151 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hello Arpan and Neeraj, Thanks for the response. I have checked the setting in hive and sentry on my production servers they are exactly the same. It works find in Prod but not in my test environment. Is there any thing else I am missing. Thanks Jay Thanks Jay On Tue, Nov 24, 2015 at 3:24 AM, Arpan Rajani wrote: > Hi Jay, > > I faced this and fixed yesterday. > There are two things. > > 1)Before connecting to Hive server do you have a valid TGT? > Do $ kinit user@Realm.com and get a valid TGT > > 2) in the jdbc connect string use the hive principle > Use "!connect > jdbc:hive2://:/;principal=3D=E2=80=9D. > > > Please make sure it is the hive=E2=80=99s principal, not the user's. > > Restart the affected services. And it should work. > > Regards, > Arpan > On 24 Nov 2015 1:55 am, "Kumar Jayapal" wrote: > >> Unable to connect to beeline after kerberos is installed I am getting >> this error. Let me know if an one has resolution for it. >> >> *Error: Could not open client transport with JDBC Uri: >> jdbc:hive2://hiven001.np.mmc.com:10000/ >> : Peer indicated failure: Unsupported >> mechanism type PLAIN (state=3D08S01,code=3D0)* >> >> >> 2015-11-24 00:54:21,869 ERROR org.apache.thrift.server.TThreadPoolServer= : >> Error occurred during processing of message. >> java.lang.RuntimeException: >> org.apache.thrift.transport.TTransportException: Unsupported mechanism t= ype >> PLAIN >> at >> org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TS= aslServerTransport.java:219) >> at >> org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssuming= TransportFactory$1.run(HadoopThriftAuthBridge.java:739) >> at >> org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssuming= TransportFactory$1.run(HadoopThriftAuthBridge.java:736) >> at java.security.AccessController.doPrivileged(Native Method) >> at javax.security.auth.Subject.doAs(Subject.java:356) >> at >> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformatio= n.java:1651) >> at >> org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssuming= TransportFactory.getTransport(HadoopThriftAuthBridge.java:736) >> at >> org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPool= Server.java:268) >> at >> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.jav= a:1145) >> at >> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.ja= va:615) >> at java.lang.Thread.run(Thread.java:745) >> Caused by: org.apache.thrift.transport.TTransportException: Unsupported >> mechanism type PLAIN >> at >> org.apache.thrift.transport.TSaslTransport.sendAndThrowMessage(TSaslTran= sport.java:232) >> at >> org.apache.thrift.transport.TSaslServerTransport.handleSaslStartMessage(= TSaslServerTransport.java:138) >> at >> org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:271) >> at >> org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTranspo= rt.java:41) >> at >> org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TS= aslServerTransport.java:216) >> ... 10 more >> >> >> >> >> >> >> >> Thanks >> Jay >> > > The contents of this e-mail are confidential and for the exclusive use of > the intended recipient. If you receive this e-mail in error please delete > it from your system immediately and notify us either by e-mail or > telephone. You should not copy, forward or otherwise disclose the content > of the e-mail. The views expressed in this communication may not > necessarily be the view held by WHISHWORKS. --001a11c15ed287b8db0525485151 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hello Arpan and Neeraj,

=
Thanks for the response.=C2=A0 I have checked the setting in hiv= e and sentry on my production servers they are exactly the same. It works f= ind in Prod=C2=A0but not in my=C2=A0test environment. Is there any thing el= se I am missing.

Thanks
Jay
<= div class=3D"gmail_extra">







ThanksJay

On Tue, Nov 24, 2015 at 3:24 AM, Arpan Rajan= i <arpan.rajani@whishworks.com> wrote:

Hi Jay,

I faced this and fixed yesterday.
There are two things.

1)Before connecting to Hive server do you have a valid TGT? =
Do $ kinit user@Realm.com and get a valid TGT

2) in the jdbc connect string use the hive principle
Use=C2=A0 "!connect jdbc:hive2://<host>:<port>/<db>;= principal=3D<Server_Principal_of_HiveServer2>=E2=80=9D.

Please make sure it is the hive=E2=80=99s principal, not the= user's.

Restart the affected services. And it should work.

Regards,
Arpan

On 24 Nov 2015 1:55 am, "Kumar Jayapal"= ; <kjayapal17@= gmail.com> wrote:
Unable to connect to beeline after kerberos is installed I am= getting this error. Let me know if an one has resolution for it.

Error: Could not open cl= ient transport with JDBC Uri: jdbc:hive2://hiven001.np.mmc.com:10000/: Peer indica= ted failure: Unsupported mechanism type PLAIN (state=3D08S01,code=3D0)<= /div>


2015-11-24 00:54:21,869 = ERROR org.apache.thrift.server.TThreadPoolServer: Error occurred during pro= cessing of message.
java.lang.RuntimeException: org.apache.thrift= .transport.TTransportException: Unsupported mechanism type PLAIN
= =C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.thrift.transport.TSaslServerTrans= port$Factory.getTransport(TSaslServerTransport.java:219)
=C2=A0 = =C2=A0 =C2=A0 =C2=A0 at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridg= e$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge.java:739= )
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.hadoop.hive.thrift.Ha= doopThriftAuthBridge$Server$TUGIAssumingTransportFactory$1.run(HadoopThrift= AuthBridge.java:736)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at java.security= .AccessController.doPrivileged(Native Method)
=C2=A0 =C2=A0 =C2= =A0 =C2=A0 at javax.security.auth.Subject.doAs(Subject.java:356)
= =C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.hadoop.security.UserGroupInformat= ion.doAs(UserGroupInformation.java:1651)
=C2=A0 =C2=A0 =C2=A0 =C2= =A0 at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssu= mingTransportFactory.getTransport(HadoopThriftAuthBridge.java:736)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.thrift.server.TThreadPoolServer= $WorkerProcess.run(TThreadPoolServer.java:268)
=C2=A0 =C2=A0 =C2= =A0 =C2=A0 at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolE= xecutor.java:1145)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at java.util.concu= rrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
= =C2=A0 =C2=A0 =C2=A0 =C2=A0 at java.lang.Thread.run(Thread.java:745)
<= div>Caused by: org.apache.thrift.transport.TTransportException: Unsupported= mechanism type PLAIN
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.t= hrift.transport.TSaslTransport.sendAndThrowMessage(TSaslTransport.java:232)=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.thrift.transport.TSasl= ServerTransport.handleSaslStartMessage(TSaslServerTransport.java:138)
=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.thrift.transport.TSaslTransp= ort.open(TSaslTransport.java:271)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at = org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.= java:41)
=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org.apache.thrift.transpo= rt.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216)=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 ... 10 more







Thanks
Jay

The contents of this e-mail are confidential and for the exclusive use of= the intended recipient. If you receive this e-mail in error please delete = it from your system immediately and notify us either by e-mail or telephone= . You should not copy, forward or otherwise disclose the content of the e-m= ail. The views expressed in this communication may not necessarily be the v= iew held by WHISHWORKS.

--001a11c15ed287b8db0525485151--