question Re: Kerberized HDP 2.4 - not able to access Hive View in Archives of Support Questions (Read Only)

Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Fri, 02 Dec 2016 03:12:03 GMT

screen-shot-2016-12-01-at-110317-am.png hdp24-core-site-notworking.xml

Hi All,

I've kerberized HDP 2.4, and i'm trying to access Hive view on Ambari.

I'm logged in as admin, and i'm getting the following error -

-----------

Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]; Host Details : local host is: "sandbox.hortonworks.com/10.0.2.15"; destination host is: "sandbox.hortonworks.com":8020;

---------------

I've followed the steps in the following link -

https://community.hortonworks.com/articles/40658/configure-hive-view-for-kerberized-cluster.html

Pls note - I'm able to access the Tez view, but the Hive view is showing exception

Attached is screenshot of Hive View, and core-site.xml.

Re: Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Fri, 02 Dec 2016 03:14:14 GMT

@Kuldeep Kulkarni - could you pls take a look, and let me know.. i've sone the steps provided in you post, but still getting the error.

https://community.hortonworks.com/articles/40658/configure-hive-view-for-kerberized-cluster.html

Thanks !

Re: Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Fri, 02 Dec 2016 03:40:09 GMT

screen-shot-2016-12-01-at-113647-am.png

screen-shot-2016-12-01-at-113656-am.png

Attaching screenshots of the Hive View configuration on Ambari.

Re: Kerberized HDP 2.4 - not able to access Hive View

KuldeepK — Fri, 02 Dec 2016 04:05:46 GMT

@Karan Alang - Can you please confirm if you have configured Ambari for Kerberos authentication?

Can you please paste me the screenshot of your hive view settings? also if possible please attach ambari-server.log to this thread.

Re: Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Fri, 02 Dec 2016 05:21:43 GMT

ambari-hive-view-hdp24.pdf

@Kuldeep Kulkarni - yes, used the following link to configure Ambari for Kerberos

https://community.hortonworks.com/articles/40635/configure-tez-view-for-kerberized-hdp-cluster.html

also, attached is ambari-server.log & the screenshot of the Hive View on Ambari

Pls let me know, thanks !ambari-server-1201log.zip

Re: Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Fri, 02 Dec 2016 05:27:07 GMT

@Kuldeep Kulkarni,

btw, i'm running Hive on MapReduce (was getting error on running on Tez)

Re: Kerberized HDP 2.4 - not able to access Hive View

KuldeepK — Fri, 02 Dec 2016 05:27:51 GMT

@Karan Alang

I can see that you have mentioned IP address under custom settings. Please do not use IP addresses anywhere, Kerberos authentication doesn't like IP addresses.

Also Please select custom setting where you have selected local cluster under 'Cluster Management' section.

I would suggest you double check the settings with my article. I can see that YARN resource manager and ATS properties are also unset in your PDF.

Hope this information helps.

Re: Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Fri, 02 Dec 2016 06:40:14 GMT

@Kuldeep Kulkarni,

thanks for the input .. using the Custom setting (with changed values) instead of the default 'local cluster' seems to have fixed the issue !

Re: Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Mon, 05 Dec 2016 08:06:33 GMT

@Kuldeep Kulkarni - i seem to be having another issue .. i've users (hive_user1, hive_user2) and i've created policy giving the access to table - test.

On trying to access the table on Hive View, it gives the following error ->

-----------------

Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ambari-server] does not have [SELECT] privilege on [default/test/sno] [ERROR_STATUS]

----------------

Details in the link below ->

https://community.hortonworks.com/questions/69761/kerberized-hdp-24-getting-error-in-using-hive-view.html#answer-69863

what needs to be done to fix this issue ?

Thanks !

Re: Kerberized HDP 2.4 - not able to access Hive View

KuldeepK — Sat, 10 Dec 2016 03:43:42 GMT

@Karan Alang - Can you please check if you have ranger plugin enabled for Hive? If so, please try to grant ambari-server access to default DB

Re: Kerberized HDP 2.4 - not able to access Hive View

karan_alang1 — Sat, 10 Dec 2016 04:01:33 GMT

@Kuldeep Kulkarni - thanks for the response, the issue got fixed.

Pls see link ->

https://community.hortonworks.com/questions/69761/kerberized-hdp-24-getting-error-in-using-hive-view.html#answer-69863