Kerberized HDP 2.4 - not able to access Hive View

[#1]

screen-shot-2016-12-01-at-110317-am.pnghdp24-core-site-notworking.xml

Hi All,

I've kerberized HDP 2.4, and i'm trying to access Hive view on Ambari.

I'm logged in as admin, and i'm getting the following error -

-----------

Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]; Host Details : local host is: "sandbox.hortonworks.com/10.0.2.15"; destination host is: "sandbox.hortonworks.com":8020;

---------------

I've followed the steps in the following link -

https://community.hortonworks.com/articles/40658/configure-hive-view-for-kerberized-cluster.html

Pls note - I'm able to access the Tez view, but the Hive view is showing exception

Attached is screenshot of Hive View, and core-site.xml.

[#2]

@Kuldeep Kulkarni - could you pls take a look, and let me know.. i've sone the steps provided in you post, but still getting the error.

https://community.hortonworks.com/articles/40658/configure-hive-view-for-kerberized-cluster.html

Thanks !

[#3]

@Karan Alang - Can you please confirm if you have configured Ambari for Kerberos authentication?

Can you please paste me the screenshot of your hive view settings? also if possible please attach ambari-server.log to this thread.

[#4]

ambari-hive-view-hdp24.pdf

@Kuldeep Kulkarni - yes, used the following link to configure Ambari for Kerberos

https://community.hortonworks.com/articles/40635/configure-tez-view-for-kerberized-hdp-cluster.html

also, attached is ambari-server.log & the screenshot of the Hive View on Ambari

Pls let me know, thanks !ambari-server-1201log.zip

[#5]

@Kuldeep Kulkarni,

btw, i'm running Hive on MapReduce (was getting error on running on Tez)

[#6]

screen-shot-2016-12-01-at-113647-am.png

screen-shot-2016-12-01-at-113656-am.png

Attaching screenshots of the Hive View configuration on Ambari.

[#7 · Accepted solution]

@Karan Alang

I can see that you have mentioned IP address under custom settings. Please do not use IP addresses anywhere, Kerberos authentication doesn't like IP addresses.

Also Please select custom setting where you have selected local cluster under 'Cluster Management' section.

I would suggest you double check the settings with my article. I can see that YARN resource manager and ATS properties are also unset in your PDF.

Hope this information helps.

[#8]

@Kuldeep Kulkarni,

thanks for the input .. using the Custom setting (with changed values) instead of the default 'local cluster' seems to have fixed the issue !

[#9]

@Kuldeep Kulkarni - i seem to be having another issue .. i've users (hive_user1, hive_user2) and i've created policy giving the access to table - test.

On trying to access the table on Hive View, it gives the following error ->

-----------------

Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ambari-server] does not have [SELECT] privilege on [default/test/sno] [ERROR_STATUS]

----------------

Details in the link below ->

https://community.hortonworks.com/questions/69761/kerberized-hdp-24-getting-error-in-using-hive-view...

what needs to be done to fix this issue ?

Thanks !

[#10]

@Karan Alang - Can you please check if you have ranger plugin enabled for Hive? If so, please try to grant ambari-server access to default DB