Fixing HiveServer Interactive / LLAP failures with: '/etc/security/keytabs/hive.llap.zk.sm.keytab' not found while getting initial credentials

[#1]

This failure to start HiveServer Interactive / Hive LLAP is due to a known problem in Ambari 2.5 where certain keytab files are not generated if you enable LLAP after your cluster is Kerberized. The Ambari Kerberos wizard generates keytabs for all services that are present as of the time the Kerberos Wizard is run. If HiveServer Interactive is not enabled when the wizard runs, certain essential keytabs will not be present when you try to enable HiveServer Interactive / LLAP, nor are they generated at that time.

There are two options for resolving this problem:

• Regenerate keytabs using the Ambari Kerberos wizard, refer to the Ambari documentation for this process.
• On all cluster nodes, copy the hive.service.keytab to hive.llap.zk.sm.keytab. If your keytabs are stored in the default location, cp /etc/security/keytabs/hive.service.keytab /etc/security/keytabs/hive.llap.zk.sm.keytab