Unauthorized connection for super-user: hcat

[#1]

Hi,

When trying to test functionality of Ambari Pig view with a simple job, I got the following exception:

org.apache.ambari.view.utils.ambari.AmbariApiException: {"error":"Unauthorized connection for super-user: hcat from IP 10.0.102.62"}

It was Pig view and I was trying that with admin user. Since Ambari runs by root user I added the entries

hadoop.proxyuser.root.hosts=*

hadoop.proxyuser.root.groups=*

in core-site.xml file.

After getting above exception, I updated value of

hadoop.proxyuser.hcat.hosts

with * from hostname of one server. It worked that way.

Now the question is, what is the relation of pig view with hcat user?

[#2 · Accepted solution]

@Sedat Kestepe

For Pig View the hcat proxy settings are needed. Please see the following link for more details on this: https://docs.hortonworks.com/HDPDocuments/Ambari-2.4.2.0/bk_ambari-views/content/setup_WebHCat_proxy... We must set up an HDFS proxy user for WebHCat and a WebHCat proxy user for the Ambari Server daemon account.

To setup the HDFS proxy user for WebHCat :

In Ambari Web, browse to Services > HDFS > Configs.

Under the Advanced tab, navigate to the Custom core-site section.

Click Add Property… to add the following custom properties:

hadoop.proxyuser.hcat.groups=*
hadoop.proxyuser.hcat.hosts=*

.

[#3]

Thanks @Jay SenSharma,

Apparently, I lost my attention on the late hours and stuck on Hive View page 🙂

Now I got the reason:

I run ambari-server with root user. Pig View goes to Hive and wants to use hcat user. To make it possible, we set

webhcat.proxyuser.root.hosts

and

webhcat.proxyuser.root.groups

And hcat user needs proxy settings on hdfs to be able to write and read. And that point we set

hadoop.proxyuser.hcat.groups=*

hadoop.proxyuser.hcat.hosts=*

Right?

[#4]

Right, @Sedat Kestepe