hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Manikumar (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HIVE-16708) Exception while renewing a Delegation Token
Date Thu, 18 May 2017 11:27:04 GMT
Manikumar created HIVE-16708:
--------------------------------

             Summary: Exception while renewing a Delegation Token
                 Key: HIVE-16708
                 URL: https://issues.apache.org/jira/browse/HIVE-16708
             Project: Hive
          Issue Type: Bug
            Reporter: Manikumar


I am adding support to Storm Hive Bolt to access Hive meta-store using delegation tokens.
I am able to create and cancel delegation tokens using HCatClient. I am getting below exception
while renewing a delegation token.

Exception:
org.apache.hive.hcatalog.common.HCatException: org.apache.hive.hcatalog.common.HCatException
: 9001 : Exception occurred while processing HCat request : MetaException while renewing delegation
token.. Cause : MetaException(message:hive/test.cluster.com@EXAMPLE.COM tries to renew a token
with renewer hive)
	at org.apache.hive.hcatalog.api.HCatClientHMSImpl.renewDelegationToken(HCatClientHMSImpl.java:643)
~[hive-webhcat-java-client-0.14.0.jar:0.14.0]
	

Hadoop's AbstractDelegationTokenIdentifier sets the renewer to Kerberos short name but HCatCleint.renewDelegationToken
uses the fullName. This causes the renewal to fail.

Relevant parts of code: https://github.com/apache/hive/blob/master/shims/common/src/main/java/org/apache/hadoop/hive/thrift/DelegationTokenSecretManager.java#L96

https://github.com/apache/hadoop/blob/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/token/delegation/AbstractDelegationTokenIdentifier.java#L105


Let me know If I am missing something. 




--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message