Support Questions
Find answers, ask questions, and share your expertise

How to Renew Hive Delegation Token Period

New Contributor

Hi guys,

I am setting up my secure cluster with Kerberos.

I run hiveserver2 and metastore on the same machine.

When config hiveserver2-site.xml, I am not sure about what are delegation token configurations about?

<property> <name>hive.cluster.delegation.key.update-interval</name> <value>1000</value> </property> <property> <name>hive.cluster.delegation.token.renew-interval</name> <value>1000</value> </property> <property> <name>hive.cluster.delegation.token.max-lifetime</name> <value>3000</value> </property>

Could you guys explain me these settings? And What should I do if my program token is expired?

How can I renew it?

Thank you.


Cloudera Employee

If the delegation token is expired, the server has a background thread to remove expired Delegation Tokens from the server’s token store.

Only the renewer of the Delegation Token can renew it, before it expires.


You may refer the below blog for understanding delegation tokes and its associated parameters:

Hadoop delegation tokens explained