Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

Unable to connect hive

avatar
New Member

Unable to connect from spotfire to hive using Knox. getting following exceptions.

 WARN  [HiveServer2-HttpHandler-Pool: Thread-260]: thrift.ThriftCLIService (ThriftCLIService.java:OpenSession(324)) - Error ope
ning session:
org.apache.hive.service.cli.HiveSQLException: Failed to validate proxy privilege of knox for user1
        at org.apache.hive.service.auth.HiveAuthFactory.verifyProxyAccess(HiveAuthFactory.java:443) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.3-8
]
        at org.apache.hive.service.cli.thrift.ThriftCLIService.getProxyUser(ThriftCLIService.java:809) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.
3-8]
        at org.apache.hive.service.cli.thrift.ThriftCLIService.getUserName(ThriftCLIService.java:382) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.3
-8]
1 ACCEPTED SOLUTION

avatar
Expert Contributor

@timc c

Can you also check the following properties and modify it according to your needs ?

webhcat.proxyuser.knox.hosts *

webhcat.proxyuser.knox.groups *

As Jay pointed - once you set the appropriate permission restart all the necessary components + all hive services.

View solution in original post

5 REPLIES 5

avatar
Master Mentor

@timc c

Have you changed the "hadoop.proxyuser.knox.groups" or "hadoop.proxyuser.knox.hosts" to access hive2 through knox ? Either set the values for these properties to * or the user which is failing.

If yes, then you will have to restart the Hive.

Restart the Hive service, so that it operates using these updated core-site configurations.

You are uisng HDP 2.6 but for Old HDP Spack (2.5) there was a similar issue reported as known issue. Please see: BUG-66998 in https://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-release-notes/content/ambari_reln...

avatar
New Member

thanks for the reply. Both this property are set to * in my current cluster

avatar
Master Mentor

@timc c

Have you tried restarting the hive service and test the same.

avatar
New Member

avatar
Expert Contributor

@timc c

Can you also check the following properties and modify it according to your needs ?

webhcat.proxyuser.knox.hosts *

webhcat.proxyuser.knox.groups *

As Jay pointed - once you set the appropriate permission restart all the necessary components + all hive services.