Member since
09-11-2015
115
Posts
126
Kudos Received
15
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
3092 | 08-15-2016 05:48 PM | |
2896 | 05-31-2016 06:19 PM | |
2447 | 05-11-2016 03:10 PM | |
1885 | 05-10-2016 07:06 PM | |
4795 | 05-02-2016 06:25 PM |
04-05-2016
06:50 PM
1 Kudo
You mention Knox 0.6.0 however the path shows 0.5.0. For Java it will also help to know whether you are using Oracle or OpenJDK. To address these questions, please also provide the output of: hdp-select versions
hdp-select status knox-server
rpm -qa | grep knox
java -version
... View more
03-29-2016
06:36 PM
You may also need to add or modify some gateway properties, such as gateway.frontend.url (undefined by default), to accommodate the load balancer.
... View more
03-29-2016
06:30 PM
This occurs on hosts with following JDK versions or newer: JDK Family Versions Oracle 1.8.0_71 Oracle 1.7.0_95 Oracle 1.6.0_111 OpenJDK 1.7.0_45 OpenJDK 1.8.0_40 It is also recommended to upgrade to SmartSense 1.2.1+ while applying these changes.
... View more
03-21-2016
02:26 PM
1 Kudo
Database and table metadata is stored in the Hive Metastore, not in HDFS, so a different approach is needed to restrict this info from being sent to HiveServer2 clients. This feature was added in Hive 1.2.0 by HIVE-9350. You may need to use Ranger to achieve this functionality, which was added in RANGER-238. Both of these features are included in HDP 2.3.0+
... View more
03-14-2016
06:19 PM
7 Kudos
Kerberos user principals have 2 parts (otherwise you'd be right... that would be a deployment nightmare!). Only host-based service principals have 3 parts (the extra part being the host where the service is running). In the beeline connect string you should always use the hive service principal for the HiveServer2 instance to which you are connecting. Another option is to use _HOST instead of the specific hostname, which will be expanded to the correct host. For example: kinit myuser@COMPANY.COM
beeline> !connect jdbc:hive2://somehost.company.com:10000/default;principal=hive/_HOST@COMPANY.COM
... View more
02-24-2016
08:01 PM
1 Kudo
@Prakash Punj Can you verify whether you are still experiencing an issue after replacing the hyphen/dash/minus symbol with the correct character, as described by Benjamin below?
... View more
02-19-2016
06:30 PM
1 Kudo
Confirmed, the pasted character is not a minus sign (ASCII 45 in decimal). You can verify with the 'od' command.
... View more
02-10-2016
07:09 PM
1 Kudo
@Adi Jabkowsky I think it attempts to bind as the user being authenticated. Additional LDAP properties are available in Hive 1.3: https://cwiki.apache.org/confluence/display/Hive/Setting+Up+HiveServer2#SettingUpHiveServer2-Authentication/SecurityConfiguration
... View more
02-09-2016
06:12 PM
1 Kudo
As described in the docs: If you're using AD you should also define a custom hive-site property hive.server2.authentication.ldap.Domain If you're using OpenLDAP you should also define a custom hive-site property hive.server2.authentication.ldap.baseDN Also make sure to force HiveServer2 to restart in Ambari. Go to the host(s) running HS2, and use the drop-down next to HiveServer2 to 'Restart' which will push the new configs. There was an Ambari bug that would mark all other Hive components for restart, but NOT HS2, even when it's required, and the "Restart All Affected" will NOT push new HS2 configs in that case.
... View more
02-04-2016
08:56 PM
2 Kudos
Since JCEKS is a superset of JKS, what is the reason for having two files? For example, couldn't we use gateway.jceks that stored both gateway-identity and gateway-identity-passphrase, instead of using a separate __gateway-credentials.jceks in addition to gateway.jks?
... View more
Labels: