Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id ECFF4200BF3 for ; Thu, 5 Jan 2017 10:44:51 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id EB84F160B27; Thu, 5 Jan 2017 09:44:51 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 40AEF160B26 for ; Thu, 5 Jan 2017 10:44:51 +0100 (CET) Received: (qmail 18346 invoked by uid 500); 5 Jan 2017 09:44:50 -0000 Mailing-List: contact dev-help@hive.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hive.apache.org Delivered-To: mailing list dev@hive.apache.org Received: (qmail 18330 invoked by uid 99); 5 Jan 2017 09:44:49 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 05 Jan 2017 09:44:49 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 7B52FC1F32 for ; Thu, 5 Jan 2017 09:44:49 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.879 X-Spam-Level: * X-Spam-Status: No, score=1.879 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id Nclga1O8aJJZ for ; Thu, 5 Jan 2017 09:44:48 +0000 (UTC) Received: from mail-lf0-f53.google.com (mail-lf0-f53.google.com [209.85.215.53]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 0EFA05FD36 for ; Thu, 5 Jan 2017 09:44:48 +0000 (UTC) Received: by mail-lf0-f53.google.com with SMTP id d16so29611497lfb.1 for ; Thu, 05 Jan 2017 01:44:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=58g0WAFwcUygZ0TdNn6sCk00OWTR5akFregbuxAvXMc=; b=HXa4RJby6QlaTKau19XtPqrmFuBQDlosGC1lXUCmCDVmqKVP6JUpR7Z2y2vh16m6B7 Fw0prahr1zC3/cTB0NQG/oiC53NTcP2MbBSp7o/0CkiG5dBCwubQiQUVYeHFjQmz/q/D Tms6G+g5BBSW1nShajPrsZYUvv+khcJ6K8Tn/Na7D5tfsLSnURd8kdmtExWQz17ZAZMd hu99CaENUrBz1RHH8x0ioBYq04JIE3QjJMyh0F0jCjTMC2X3uqhFm4sw7sHx6zp+xG7p o5FKbf4QjRfR5CTUgRJlOkKkO9dCQ0mHtJekXeKw+XYjh5bhpoV7tZDvLugkcwJewVTd VWhA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=58g0WAFwcUygZ0TdNn6sCk00OWTR5akFregbuxAvXMc=; b=dG9vAB+96vkEzzbqHmaAo4pSyVjx1/CHWlFOD8svrisLg4Jo8wCBz3Ep046ORhk4w2 oWW/qcKluDzOQEcWAB6JgMec81+MBKbvYLfJYR3PdtMJgnZvMR/a+cPB0QK9g3HcnUEP AvDeUIhLvzu8KejpScerEjOsRsObsLY5dEtNIGxY1c1BfnN5kRxT0Vsac7K+5fyXV6v1 eIPB6idPZxJkj2NhuqICB3S0oGFvxzbSEoZ4i3MHYHcncv4a6CVqBYHIhU6DUGs3qq/q VZDUmptg+vonfSxT6YbYTtHHeJ/j/myf+NV7s/ZV0Xd9sdvombEjU09N0xbA9yVl49uO 80wg== X-Gm-Message-State: AIkVDXLsdNqOR9Qn7fcEW8gGKTypJxj82FMyXoT5R390hR3V+zIvsiGgud2Cn4bdcrqpY2XhT2S3Sa3Qin6DHg== X-Received: by 10.25.23.210 with SMTP id 79mr15281872lfx.41.1483609480417; Thu, 05 Jan 2017 01:44:40 -0800 (PST) MIME-Version: 1.0 Received: by 10.25.162.199 with HTTP; Thu, 5 Jan 2017 01:44:20 -0800 (PST) From: shakun grover Date: Thu, 5 Jan 2017 15:14:20 +0530 Message-ID: Subject: Hive + Kerberos Ticket Issue To: dev@hive.apache.org Content-Type: multipart/alternative; boundary=001a1140216210d6d9054555c05c archived-at: Thu, 05 Jan 2017 09:44:52 -0000 --001a1140216210d6d9054555c05c Content-Type: text/plain; charset=UTF-8 When trying to create Hive Jdbc Connection after getting Kerberos ticket using kinit -k -t command with ProcessBuilder , I am getting below exception: java.lang.IllegalStateException: This ticket is no longer valid at javax.security.auth.kerberos.KerberosTicket.toString(KerberosTicket.java:638) at java.lang.String.valueOf(String.java:2847) at java.lang.StringBuilder.append(StringBuilder.java:128) at sun.security.jgss.krb5.SubjectComber.findAux(SubjectComber.java:150) at sun.security.jgss.krb5.SubjectComber.find(SubjectComber.java:59) at sun.security.jgss.krb5.Krb5Util.getTicket(Krb5Util.java:155) at sun.security.jgss.krb5.Krb5InitCredential$1.run(Krb5InitCredential.java:346) at sun.security.jgss.krb5.Krb5InitCredential$1.run(Krb5InitCredential.java:344) at java.security.AccessController.doPrivileged(Native Method) at sun.security.jgss.krb5.Krb5InitCredential.getTgt(Krb5InitCredential.java:343) at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:145) at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:121) at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:223) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193) at org.apache.thrift.transport.TSaslClientTransport.handleSaslStartMessage(TSaslClientTransport.java:94) at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:253) at org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:415) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1548) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:203) at org.apache.hive.jdbc.HiveConnection.(HiveConnection.java:178) at org.apache.hive.jdbc.HiveDriver.connect(HiveDriver.java:105) at java.sql.DriverManager.getConnection(DriverManager.java:571) at java.sql.DriverManager.getConnection(DriverManager.java:215) at com.dataguise.agent.hive.util.HiveJDBCClient.(HiveJDBCClient.java:34) After ticket is generated from code, if I klist on the cmd line I get the valid ticket. But I am not able to get the JDBC connection after the ticket is generated. Moreover If I set system property -Djavax.security.auth.useSubjectCredsOnly=false then I am able to get the JDBC Session. Could anyone help me with this? Thanks in advance!! -- Thanks & Regards, Shakun Grover --001a1140216210d6d9054555c05c--