Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Join query fails from beeline with unable to verify key strength.

Highlighted

Join query fails from beeline with unable to verify key strength.

Explorer

Hi, 

 

I have tried several changes and came to a point where i have moved further however still stuck . 

From beeline i can run two queries...on two different tables, but when I attempt to run a single query that joins them, I get the following error:

 

ERROR:

 

Getting log thread is interrupted, since query is done!

Error: Error while compiling statement: FAILED: SemanticException Unable to compare key strength for hdfs://nameservice1/darchive/source/lls/di/ppxtyu and hdfs://nameservice1/darchive/source/lls/di/aubxcry: java.lang.NullPointerException (state=42000,code=40000)

 

 

These are the values  i have for them which are in brackets. 

 

hadoop.kms.acl.GET_METADATA  (*)

whitelist.key.acl.READ (hdfs, hive)

 

 

From hive2 logs i see that it comes till getting metadata for the sources and then fails with the above error. 

 

if i do a select * from table it works effectively. however when i do a join it fails.

 

There are only 2 blacklists with a * rest are no value(no one is blacklisted)

 

<property>
<name>hadoop.kms.blacklist.GET</name>
<value>*</value>
</property>

 

<property>
<name>hadoop.kms.blacklist.SET_KEY_MATERIAL</name>
<value>*</value>
</property>

 

Any suggestions ? 

 

 

 

3 REPLIES 3

Re: Join query fails from beeline with unable to verify key strength.

Explorer

Any clues ?

Re: Join query fails from beeline with unable to verify key strength.

Champion
Have you looked at this post?

https://community.cloudera.com/t5/Web-UI-Hue-Beeswax/Error-Hive-query-hive-not-allowed-to-do-GET-MET...

The OP mentioned a few other ACLs that he had the hive user in.

hadoop.kms.acl.GET_METADATA
hadoop.kms.acl.DECRYPT_EEK
default.key.acl.READ
whitelist.key.acl.MANAGEMENT
whitelist.key.acl.READ
whitelist.key.acl.DECRYPT_EEK
hadoop.kms.acl.DECRYPT_EEK

Hope this helps.

Re: Join query fails from beeline with unable to verify key strength.

Explorer

Yes checked that. I have * for most of them. 

I dont think whitelist.key.acl.MANAGEMENT requires hive. However i will give it a try.