hive-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Manikumar <manikumar.re...@gmail.com>
Subject Exception while renewing a Delegation Token
Date Thu, 27 Apr 2017 12:49:00 GMT
Hi,

I am adding support to Storm Hive Bolt to access Hive meta-store using
delegation
tokens. I am able to create and cancel delegation tokens using HCatClient.
I am getting
below exception while renewing a delegation token.

Exception:
org.apache.hive.hcatalog.common.HCatException:
org.apache.hive.hcatalog.common.HCatException : 9001 : Exception occurred
while processing HCat request : MetaException while renewing delegation
token.. Cause : MetaException(message:hive/test.cluster.com@EXAMPLE.COM
tries to renew a token with renewer hive)
at
org.apache.hive.hcatalog.api.HCatClientHMSImpl.renewDelegationToken(HCatClientHMSImpl.java:643)
~[hive-webhcat-java-client-0.14.0.jar:0.14.0]

Hadoop's AbstractDelegationTokenIdentifier sets the renewer to Kerberos
shortname
but HCatCleint.renewDelegationToken uses the fullName. This causes the
renewal to fail.

Relavent parts of code :
https://github.com/apache/hive/blob/master/shims/common/src/main/java/org/apache/hadoop/hive/thrift/DelegationTokenSecretManager.java#L96

https://github.com/apache/hadoop/blob/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/token/delegation/AbstractDelegationTokenIdentifier.java#L105


Let me know If I am missing something. Is there any existing JIRA for this?


Thanks,
Manikumar

Mime
View raw message