question ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String in Support Questions

ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String

Nur — Mon, 27 Feb 2023 08:55:23 GMT

Hello,

I am unable to access Hive using Beeline connection string in the edge node. The JDBC String that I am using is as follows:

beeline -u "jdbc:hive2://Example.com:10000/default;principal=hive/Example.com@EXAMPLE.COM"

Error:

Unknown HS2 problem when communicating with Thrift server.
Error:jdbc:hive2://Example.com:10000/default;principal=hive/Example.com@EXAMPLE.COM: Invalid status 21 (state=08S01,code=0)

Help is required to fix this issue.

Thank you.

Re: ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String

asish — Mon, 27 Feb 2023 09:15:53 GMT

@Nur

1. are you using SSL ?

2. Provide

beeline -u "jdbc:hive2://Example.com:10000/default;principal=hive/Example.com@EXAMPLE.COM" --berbose=true

3. Hiveserver2 logs

Re: ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String

Nur — Mon, 27 Feb 2023 11:24:50 GMT

1. Yes Iam using ssl

2. In below image have provided the output from the connection string

3. Have provided the SS for the log file in the below image.

Re: ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String

asish — Mon, 27 Feb 2023 11:33:03 GMT

I see that you are using CDP 7.1.7. Follow below steps if youare using autoTLS

1. Check TrustStore Password:
======
# cat /etc/hive/conf/ssl-client.xml | grep -i -A1 "ssl.client.truststore.password"
<name>ssl.client.truststore.password</name>
<value>truststore_password</value>
======

2. Below should be used for Kerberos + SSL
beeline -u "jdbc:hive2://xxxxxx10000/default;principal=hive/xxxxx@CREAL;ssl=true;sslTrustStore=/var/lib/cloudera-scm-agent/agent-cert/cm-auto-global_truststore.jks;trustStorePassword=trsutpwd"

Re: ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String

VidyaSargur — Fri, 03 Mar 2023 05:46:03 GMT

@Nur, Have the replies helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.

Re: ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String

bish765485 — Thu, 26 Sep 2024 11:45:41 GMT

Hey Guys,

I am also facing the same error while connecting via beeline with ssl and kerberos on the server:
root@ip-172-31-13-77:~# beeline -u jdbc:hive2://ec2-52-66-58-15.ap-south-1.compute.amazonaws.com:10000/default;principal=hive/ec2-52-66-58-15.ap-south-1.compute.amazonaws.com@AP-SOUTH-1.COMPUTE.AMAZONAWS.COM;saslqop=auth-conf
SLF4J: Class path contains multiple SLF4J bindings.
SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-7.1.7-1.cdh7.1.7.p0.15945976/jars/log4j-slf4j-impl-2.13.3.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-7.1.7-1.cdh7.1.7.p0.15945976/jars/slf4j-log4j12-1.7.30.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
SLF4J: Actual binding is of type [org.apache.logging.slf4j.Log4jLoggerFactory]
WARNING: Use "yarn jar" to launch YARN applications.
SLF4J: Class path contains multiple SLF4J bindings.
SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-7.1.7-1.cdh7.1.7.p0.15945976/jars/log4j-slf4j-impl-2.13.3.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-7.1.7-1.cdh7.1.7.p0.15945976/jars/slf4j-log4j12-1.7.30.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
SLF4J: Actual binding is of type [org.apache.logging.slf4j.Log4jLoggerFactory]
Connecting to jdbc:hive2://ec2-52-66-58-15.ap-south-1.compute.amazonaws.com:10000/default
24/09/26 11:44:18 [main]: WARN jdbc.HiveConnection: Failed to connect to ec2-52-66-58-15.ap-south-1.compute.amazonaws.com:10000
Unknown HS2 problem when communicating with Thrift server.
Error: Could not open client transport with JDBC Uri: jdbc:hive2://ec2-52-66-58-15.ap-south-1.compute.amazonaws.com:10000/default: Invalid status 21 (state=08S01,code=0)

Please connect with someone expert on this domain and get me correct .
Thanks in advance

Ankit Bishnoi

Re: ERROR: Connecting to Kerberos Enabled Hive using Beeline Connection String

bish765485 — Fri, 27 Sep 2024 06:55:19 GMT

Any there from cloudera to help me on this issue.....