Reply
Explorer
Posts: 7
Registered: ‎08-12-2016

Join query fails from beeline with unable to verify key strength.

[ Edited ]

Hi, 

 

I have tried several changes and came to a point where i have moved further however still stuck . 

From beeline i can run two queries...on two different tables, but when I attempt to run a single query that joins them, I get the following error:

 

ERROR:

 

Getting log thread is interrupted, since query is done!

Error: Error while compiling statement: FAILED: SemanticException Unable to compare key strength for hdfs://nameservice1/darchive/source/lls/di/ppxtyu and hdfs://nameservice1/darchive/source/lls/di/aubxcry: java.lang.NullPointerException (state=42000,code=40000)

 

 

These are the values  i have for them which are in brackets. 

 

hadoop.kms.acl.GET_METADATA  (*)

whitelist.key.acl.READ (hdfs, hive)

 

 

From hive2 logs i see that it comes till getting metadata for the sources and then fails with the above error. 

 

if i do a select * from table it works effectively. however when i do a join it fails.

 

There are only 2 blacklists with a * rest are no value(no one is blacklisted)

 

<property>
<name>hadoop.kms.blacklist.GET</name>
<value>*</value>
</property>

 

<property>
<name>hadoop.kms.blacklist.SET_KEY_MATERIAL</name>
<value>*</value>
</property>

 

Any suggestions ? 

 

 

 

Explorer
Posts: 7
Registered: ‎08-12-2016

Re: Join query fails from beeline with unable to verify key strength.

Any clues ?

Posts: 350
Topics: 0
Kudos: 39
Solutions: 27
Registered: ‎08-16-2016

Re: Join query fails from beeline with unable to verify key strength.

Have you looked at this post?

https://community.cloudera.com/t5/Web-UI-Hue-Beeswax/Error-Hive-query-hive-not-allowed-to-do-GET-MET...

The OP mentioned a few other ACLs that he had the hive user in.

hadoop.kms.acl.GET_METADATA
hadoop.kms.acl.DECRYPT_EEK
default.key.acl.READ
whitelist.key.acl.MANAGEMENT
whitelist.key.acl.READ
whitelist.key.acl.DECRYPT_EEK
hadoop.kms.acl.DECRYPT_EEK

Hope this helps.
Explorer
Posts: 7
Registered: ‎08-12-2016

Re: Join query fails from beeline with unable to verify key strength.

[ Edited ]

Yes checked that. I have * for most of them. 

I dont think whitelist.key.acl.MANAGEMENT requires hive. However i will give it a try. 

Announcements