hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sushanth Sowmyan (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-16973) Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in HS2
Date Sun, 16 Jul 2017 23:19:00 GMT

    [ https://issues.apache.org/jira/browse/HIVE-16973?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16089179#comment-16089179
] 

Sushanth Sowmyan commented on HIVE-16973:
-----------------------------------------

Apparently the build breakage is not unrelated - it looks like we did not have an explicit
dependency on plexus while using it from WarehouseInstance.java , whereas we were bringing
in the dependency via accumulo's dependencies. Now that we depend on a new accumulo version
that has a different dependency chain, we no longer bring in plexus, and break the other test
compile. I'm attaching a new version of this patch with that fixed.

> Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in HS2
> --------------------------------------------------------------------------------
>
>                 Key: HIVE-16973
>                 URL: https://issues.apache.org/jira/browse/HIVE-16973
>             Project: Hive
>          Issue Type: Bug
>          Components: Accumulo Storage Handler
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>         Attachments: HIVE-16973.001.patch, HIVE-16973.002.branch-2.patch, HIVE-16973.003.branch-2.patch,
HIVE-16973.004-branch-2.patch, HIVE-16973.004.branch-2.patch, HIVE-16973.004-master.patch,
HIVE-16973.005-master.patch
>
>
> Had a report from a user that Kerberos+AccumuloStorageHandler+HS2 was broken. Looking
into it, it seems like the bit-rot got pretty bad. You'll see something like the following:
> {noformat}
> Caused by: java.io.IOException: Failed to unwrap AuthenticationToken 
> at org.apache.hadoop.hive.accumulo.HiveAccumuloHelper.unwrapAuthenticationToken(HiveAccumuloHelper.java:312)

> at org.apache.hadoop.hive.accumulo.mr.HiveAccumuloTableInputFormat.getSplits(HiveAccumuloTableInputFormat.java:122)

> {noformat}
> It appears that some of the code-paths changed since when I first did my testing (or
I just did poor testing) and the delegation token was never being fetched/serialized. There
also are some issues with fetching the delegation token from Accumulo properly which were
addressed in ACCUMULO-4665
> I believe it would also be best to just update the dependency to use Accumulo 1.7 (drop
1.6 support) as it's lacking in this regard. These changes would otherwise get much more complicated
with reflection -- Accumulo has moved on past 1.6, so let's do the same in Hive.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message