Mailing-List: contact issues-help@hive.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@hive.apache.org
Date: Wed, 19 Jul 2017 16:07:00 +0000 (UTC)
From: "Josh Elser (JIRA)" <jira@apache.org>
To: issues@hive.apache.org
Message-ID: <JIRA.13082882.1498582411000.283381.1500480420147@Atlassian.JIRA>
In-Reply-To: <JIRA.13082882.1498582411000@Atlassian.JIRA>
References: <JIRA.13082882.1498582411000@Atlassian.JIRA> <JIRA.13082882.1498582411399@jira-lw-us.apache.org>
Subject: [jira] [Commented] (HIVE-16973) Fetching of Delegation tokens
 (Kerberos) for AccumuloStorageHandler fails in HS2
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Wed, 19 Jul 2017 16:07:05 -0000


    [ https://issues.apache.org/jira/browse/HIVE-16973?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16093328#comment-16093328 ] 

Josh Elser commented on HIVE-16973:
-----------------------------------

Thanks so much, [~sushanth]!

No clue why that other plexus-utils was getting pulled in (seems like something that needs to get fixed in Accumulo). I really appreciate all of your help.

> Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in HS2
> --------------------------------------------------------------------------------
>
>                 Key: HIVE-16973
>                 URL: https://issues.apache.org/jira/browse/HIVE-16973
>             Project: Hive
>          Issue Type: Bug
>          Components: Accumulo Storage Handler
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>             Fix For: 3.0.0
>
>         Attachments: HIVE-16973.001.patch, HIVE-16973.002.branch-2.patch, HIVE-16973.003.branch-2.patch, HIVE-16973.004-branch-2.patch, HIVE-16973.004.branch-2.patch, HIVE-16973.004-master.patch, HIVE-16973.005-master.patch, HIVE-16973.006-master.patch
>
>
> Had a report from a user that Kerberos+AccumuloStorageHandler+HS2 was broken. Looking into it, it seems like the bit-rot got pretty bad. You'll see something like the following:
> {noformat}
> Caused by: java.io.IOException: Failed to unwrap AuthenticationToken 
> at org.apache.hadoop.hive.accumulo.HiveAccumuloHelper.unwrapAuthenticationToken(HiveAccumuloHelper.java:312) 
> at org.apache.hadoop.hive.accumulo.mr.HiveAccumuloTableInputFormat.getSplits(HiveAccumuloTableInputFormat.java:122) 
> {noformat}
> It appears that some of the code-paths changed since when I first did my testing (or I just did poor testing) and the delegation token was never being fetched/serialized. There also are some issues with fetching the delegation token from Accumulo properly which were addressed in ACCUMULO-4665
> I believe it would also be best to just update the dependency to use Accumulo 1.7 (drop 1.6 support) as it's lacking in this regard. These changes would otherwise get much more complicated with reflection -- Accumulo has moved on past 1.6, so let's do the same in Hive.


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)