hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Josh Elser (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HIVE-16973) Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in HS2
Date Tue, 27 Jun 2017 16:54:00 GMT
Josh Elser created HIVE-16973:
---------------------------------

             Summary: Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler
fails in HS2
                 Key: HIVE-16973
                 URL: https://issues.apache.org/jira/browse/HIVE-16973
             Project: Hive
          Issue Type: Bug
          Components: Accumulo Storage Handler
            Reporter: Josh Elser
            Assignee: Josh Elser


Had a report from a user that Kerberos+AccumuloStorageHandler+HS2 was broken. Looking into
it, it seems like the bit-rot got pretty bad. You'll see something like the following:

{noformat}
Caused by: java.io.IOException: Failed to unwrap AuthenticationToken 
at org.apache.hadoop.hive.accumulo.HiveAccumuloHelper.unwrapAuthenticationToken(HiveAccumuloHelper.java:312)

at org.apache.hadoop.hive.accumulo.mr.HiveAccumuloTableInputFormat.getSplits(HiveAccumuloTableInputFormat.java:122)

{noformat}

It appears that some of the code-paths changed since when I first did my testing (or I just
did poor testing) and the delegation token was never being fetched/serialized. There also
are some issues with fetching the delegation token from Accumulo properly which were addressed
in ACCUMULO-4665

I believe it would also be best to just update the dependency to use Accumulo 1.7 (drop 1.6
support) as it's lacking in this regard. These changes would otherwise get much more complicated
with reflection -- Accumulo has moved on past 1.6, so let's do the same in Hive.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message