Support Questions

Find answers, ask questions, and share your expertise

Unable to connect hive

avatar
Explorer

Unable to connect from spotfire to hive using Knox. getting following exceptions.

 WARN  [HiveServer2-HttpHandler-Pool: Thread-260]: thrift.ThriftCLIService (ThriftCLIService.java:OpenSession(324)) - Error ope
ning session:
org.apache.hive.service.cli.HiveSQLException: Failed to validate proxy privilege of knox for user1
        at org.apache.hive.service.auth.HiveAuthFactory.verifyProxyAccess(HiveAuthFactory.java:443) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.3-8
]
        at org.apache.hive.service.cli.thrift.ThriftCLIService.getProxyUser(ThriftCLIService.java:809) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.
3-8]
        at org.apache.hive.service.cli.thrift.ThriftCLIService.getUserName(ThriftCLIService.java:382) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.3
-8]
1 ACCEPTED SOLUTION

avatar
Expert Contributor

@timc c

Can you also check the following properties and modify it according to your needs ?

webhcat.proxyuser.knox.hosts *

webhcat.proxyuser.knox.groups *

As Jay pointed - once you set the appropriate permission restart all the necessary components + all hive services.

View solution in original post

5 REPLIES 5

avatar
Master Mentor

@timc c

Have you changed the "hadoop.proxyuser.knox.groups" or "hadoop.proxyuser.knox.hosts" to access hive2 through knox ? Either set the values for these properties to * or the user which is failing.

If yes, then you will have to restart the Hive.

Restart the Hive service, so that it operates using these updated core-site configurations.

You are uisng HDP 2.6 but for Old HDP Spack (2.5) there was a similar issue reported as known issue. Please see: BUG-66998 in https://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-release-notes/content/ambari_reln...

avatar
Explorer

thanks for the reply. Both this property are set to * in my current cluster

avatar
Master Mentor

@timc c

Have you tried restarting the hive service and test the same.

avatar
Explorer

avatar
Expert Contributor

@timc c

Can you also check the following properties and modify it according to your needs ?

webhcat.proxyuser.knox.hosts *

webhcat.proxyuser.knox.groups *

As Jay pointed - once you set the appropriate permission restart all the necessary components + all hive services.