Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Unable to connect hive

avatar
Explorer

Unable to connect from spotfire to hive using Knox. getting following exceptions.

 WARN  [HiveServer2-HttpHandler-Pool: Thread-260]: thrift.ThriftCLIService (ThriftCLIService.java:OpenSession(324)) - Error ope
ning session:
org.apache.hive.service.cli.HiveSQLException: Failed to validate proxy privilege of knox for user1
        at org.apache.hive.service.auth.HiveAuthFactory.verifyProxyAccess(HiveAuthFactory.java:443) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.3-8
]
        at org.apache.hive.service.cli.thrift.ThriftCLIService.getProxyUser(ThriftCLIService.java:809) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.
3-8]
        at org.apache.hive.service.cli.thrift.ThriftCLIService.getUserName(ThriftCLIService.java:382) ~[hive-service-2.1.0.2.6.0.3-8.jar:2.1.0.2.6.0.3
-8]
1 ACCEPTED SOLUTION

avatar
Expert Contributor

@timc c

Can you also check the following properties and modify it according to your needs ?

webhcat.proxyuser.knox.hosts *

webhcat.proxyuser.knox.groups *

As Jay pointed - once you set the appropriate permission restart all the necessary components + all hive services.

View solution in original post

5 REPLIES 5

avatar
Master Mentor

@timc c

Have you changed the "hadoop.proxyuser.knox.groups" or "hadoop.proxyuser.knox.hosts" to access hive2 through knox ? Either set the values for these properties to * or the user which is failing.

If yes, then you will have to restart the Hive.

Restart the Hive service, so that it operates using these updated core-site configurations.

You are uisng HDP 2.6 but for Old HDP Spack (2.5) there was a similar issue reported as known issue. Please see: BUG-66998 in https://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-release-notes/content/ambari_reln...

avatar
Explorer

thanks for the reply. Both this property are set to * in my current cluster

avatar
Master Mentor

@timc c

Have you tried restarting the hive service and test the same.

avatar
Explorer

avatar
Expert Contributor

@timc c

Can you also check the following properties and modify it according to your needs ?

webhcat.proxyuser.knox.hosts *

webhcat.proxyuser.knox.groups *

As Jay pointed - once you set the appropriate permission restart all the necessary components + all hive services.