Member since
10-28-2016
392
Posts
7
Kudos Received
20
Solutions
My Accepted Solutions
| Title | Views | Posted |
|---|---|---|
| 3484 | 03-12-2018 02:28 AM | |
| 5207 | 12-18-2017 11:41 PM | |
| 3648 | 07-17-2017 07:01 PM | |
| 2577 | 07-13-2017 07:20 PM | |
| 8239 | 07-12-2017 08:31 PM |
04-19-2017
04:25 AM
@mqureshi - the issue was that /tmp/hive had incorrect permissions, similar issue was recorded in hiveserver2-not-starting-using-ambari
... View more
04-14-2017
07:30 PM
@mqureshi - looping you in, pls. let me know if you have any ideas on this... thnx
... View more
04-12-2017
09:24 PM
@Artem Ervits, @vpoornalingam, @Mark Herring - looping you in, any ideas on this ?
... View more
04-12-2017
07:15 PM
@Pardeep, @Kuldeep Kulkarni, @Jitendra Yadav - looping you in, any ideas on this ?
... View more
04-12-2017
06:48 PM
hiveserver2log.txt hive-sitexml.txt
hiveserver2-notstartingup-1.pdf Hi All -
I've an 8 Node HDP 2.5.3 cluster, and Hive is installed on Node-6.
From Ambari - Hiveserver 2 is not startup, it gives the following error
(as shown on the Ambari UI) --------------------------------------------------------------------------------------- Connection failed on host <Node7>:10000 (Traceback (most recent call last):
File "/var/lib/ambari-agent/cache/common-services/HIVE/0.12.0.2.0/package/alerts/alert_hive_thrift_port.py", line 200, in execute
check_command_timeout=int(check_command_timeout))
File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/hive_check.py", line 74, in check_thrift_port_sasl
timeout=check_command_timeout)
File "/usr/lib/python2.6/site-packages/resource_management/core/base.py", line 155, in __init__
self.env.run()
File "/usr/lib/python2.6/site-packages/resource_management/core/environment.py", line 160, in run
self.run_action(resource, action)
File "/usr/lib/python2.6/site-packages/resource_management/core/environment.py", line 124, in run_action
provider_action()
File "/usr/lib/python2.6/site-packages/resource_management/core/providers/system.py", line 273, in action_run
tries=self.resource.tries, try_sleep=self.resource.try_sleep)
File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 70, in inner
result = function(command, **kwargs)
File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 92, in checked_call
tries=tries, try_sleep=try_sleep)
File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 140, in _call_wrapper
result = _call(command, **kwargs_copy)
File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 293, in _call
raise ExecutionFailed(err_msg, code, out, err) ExecutionFailed: Execution of '! beeline -u 'jdbc:hive2://<Node7>:10000/;transportMode=binary' -e '' 2>&1| awk '{print}'|grep -i -e 'Connection refused' -e 'Invalid URL'' returned 1. Error: Could not open client transport with JDBC Uri: jdbc:hive2://nwk2-bdp-hadoop-07.gdcs-qa.apple.com:10000/;transportMode=binary: java.net.ConnectException: Connection refused (Connection refused) (state=08S01,code=0)
Error: Could not open client transport with JDBC Uri: jdbc:hive2://<Node-7>:10000/;transportMode=binary: java.net.ConnectException: Connection refused (Connection refused) (state=08S01,code=0)
) --------------------------------------------------------------------------------------------- Pls note -> In the above error, it is trying to connect to Node-7, instead of Node-6 When i start HiveServer2 on commandline from Node-6, i'm able to start it & connect to Hive using Beeline. Any ideas where the issue is ? Attaching the HiveServer.log & the hive-site.xml as well.
... View more
Labels:
04-11-2017
06:26 AM
this is fixed, the issue was - ranger url was mal-formed.
... View more
04-11-2017
04:58 AM
Hi - i've a HDP2.5 cluster, and HiveServer2 is not starting up.
Error is as shown below, any ideas on this ?
--------------------------------
Traceback (most recent call last):
File "/var/lib/ambari-agent/cache/common-services/HIVE/0.12.0.2.0/package/scripts/hive_server.py", line 211, in <module>
HiveServer().execute()
File "/usr/lib/python2.6/site-packages/resource_management/libraries/script/script.py", line 280, in execute
method(env)
File "/var/lib/ambari-agent/cache/common-services/HIVE/0.12.0.2.0/package/scripts/hive_server.py", line 87, in start
setup_ranger_hive(upgrade_type=upgrade_type)
File "/var/lib/ambari-agent/cache/common-services/HIVE/0.12.0.2.0/package/scripts/setup_ranger_hive.py", line 79, in setup_ranger_hive
component_user_keytab=params.hive_server2_keytab if params.security_enabled else None)
File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/setup_ranger_plugin_xml.py", line 82, in setup_ranger_plugin
policy_user,is_security_enabled,is_stack_supports_ranger_kerberos,component_user,component_user_principal,component_user_keytab)
File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/ranger_functions_v2.py", line 106, in create_ranger_repository
response_code = self.check_ranger_login_urllib2(self.base_url)
File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/decorator.py", line 82, in wrapper
return function(*args, **kwargs)
File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/ranger_functions_v2.py", line 208, in check_ranger_login_urllib2
response = openurl(url, timeout=20)
File "/usr/lib/python2.6/site-packages/ambari_commons/inet_utils.py", line 40, in openurl
return urllib2.urlopen(url, timeout=timeout, *args, **kwargs)
File "/usr/lib64/python2.7/urllib2.py", line 154, in urlopen
return opener.open(url, data, timeout)
File "/usr/lib64/python2.7/urllib2.py", line 431, in open
response = self._open(req, data)
File "/usr/lib64/python2.7/urllib2.py", line 449, in _open
'_open', req)
File "/usr/lib64/python2.7/urllib2.py", line 409, in _call_chain
result = func(*args)
File "/usr/lib64/python2.7/urllib2.py", line 1244, in http_open
return self.do_open(httplib.HTTPConnection, req)
File "/usr/lib64/python2.7/urllib2.py", line 1183, in do_open
h = http_class(host, timeout=req.timeout, **http_conn_args)
File "/usr/lib64/python2.7/httplib.py", line 739, in __init__
self._set_hostport(host, port)
File "/usr/lib64/python2.7/httplib.py", line 767, in _set_hostport
raise InvalidURL("nonnumeric port: '%s'" % host[i+1:])
httplib.InvalidURL: nonnumeric port: '6080 }}'
---------------------------------
Attaching the stderr & stdout
... View more
Labels:
02-01-2017
07:21 AM
@Artem Ervits - wrt. your previous comment, i've done exactly that (pls see my comments above & also the screenshots attached in my previous comment) i.e. 1) Disabled Global access to Hbase table 2) Given access to user - hbase_user1 to scan table 'iemployee' This is done using Apache Ranger, for some reason the Ranger permissions are not being enforced. Any ideas ? When i provided the permissions on command-line, i was able to enforce permissions !
... View more
02-01-2017
01:50 AM
@Artem Ervits -
thanks, granting access to the user - hbase_user1 actually worked. However, i'd already given access to the table using Apache Ranger. Shouldn't that have worked ? What needs to be done to check/ensuure the Ranger integration with Hbase to control access ? A few more details -
Actually, when i check the Ranger audit logs - the user 'hbase_user1' appears only till December 2nd, 2017 - screenshot
screen-shot-2017-01-31-at-60941-pm.png This setup was created in Nov, and was working when i checked last year,
Attaching screenshots of the ranger policies. - global access to hbase is removed, and access to table - 'iemployee' is provided to user - hbase_user1. screen-shot-2017-01-31-at-51919-pm.png screen-shot-2017-01-31-at-51817-pm.png
... View more
01-31-2017
08:37 PM
screen-shot-2017-01-31-at-123441-pm.png screen-shot-2017-01-31-at-123417-pm.png hi All - i've a kerberized HDP 2.4 cluster, and i'm facing issue wherein user - hbase_user1
created is not able to 'see' the table, though access is provided to the user. Here is what is done -> 1) User - logging in as user 'hbase_user1' to cluster 2) generated a valid kerberos ticket [hbase_user1@sandbox ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_1029
Default principal: hbase_user1@EXAMPLE.COM Valid starting Expires Service principal
01/31/17 19:11:24 02/01/17 19:11:24 krbtgt/EXAMPLE.COM@EXAMPLE.COM
renew until 01/31/17 19:11:24 3) launch 'hbase shell' and fire command -> list 4) contents of log file shows that authorization for hbase_user1 is successful -> ---------------------------------------------------------------------------------------------------------------- tail -f /var/log/hbase/SecurityAuth.audit
2017-01-31 20:04:50,330 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hbase/sandbox.hortonworks.com@EXAMPLE.COM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hbase.protobuf.generated.ClientProtos$ClientService$BlockingInterface
2017-01-31 20:09:50,329 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Auth successful for hbase/sandbox.hortonworks.com@EXAMPLE.COM (auth:SIMPLE)
2017-01-31 20:09:50,330 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Connection from 10.0.2.15 port: 35593 with version info: version: "1.1.2.2.4.0.0-169" url: "git://c66-slave-38a0b1a6-7/grid/0/jenkins/workspace/HDP-build-centos6/bigtop/build/hbase/rpm/BUILD/hbase-1.1.2.2.4.0.0" revision: "61dfb2b344f424a11f93b3f086eab815c1eb0b6a" user: "jenkins" date: "Wed Feb 10 07:08:51 UTC 2016" src_checksum: "afb8421bf497c0e82b9489877d53b904"
2017-01-31 20:09:50,330 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hbase/sandbox.hortonworks.com@EXAMPLE.COM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hbase.protobuf.generated.ClientProtos$ClientService$BlockingInterface
2017-01-31 20:14:39,192 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Auth successful for hbase_user1@EXAMPLE.COM (auth:SIMPLE)
2017-01-31 20:14:39,195 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Connection from 10.0.2.15 port: 39743 with version info: version: "1.1.2.2.4.0.0-169" url: "git://c66-slave-38a0b1a6-7/grid/0/jenkins/workspace/HDP-build-centos6/bigtop/build/hbase/rpm/BUILD/hbase-1.1.2.2.4.0.0" revision: "61dfb2b344f424a11f93b3f086eab815c1eb0b6a" user: "jenkins" date: "Wed Feb 10 07:08:51 UTC 2016" src_checksum: "afb8421bf497c0e82b9489877d53b904"
2017-01-31 20:14:39,195 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hbase_user1@EXAMPLE.COM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hbase.protobuf.generated.MasterProtos$MasterService$BlockingInterface
2017-01-31 20:14:50,329 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Auth successful for hbase/sandbox.hortonworks.com@EXAMPLE.COM (auth:SIMPLE)
2017-01-31 20:14:50,330 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Connection from 10.0.2.15 port: 35679 with version info: version: "1.1.2.2.4.0.0-169" url: "git://c66-slave-38a0b1a6-7/grid/0/jenkins/workspace/HDP-build-centos6/bigtop/build/hbase/rpm/BUILD/hbase-1.1.2.2.4.0.0" revision: "61dfb2b344f424a11f93b3f086eab815c1eb0b6a" user: "jenkins" date: "Wed Feb 10 07:08:51 UTC 2016" src_checksum: "afb8421bf497c0e82b9489877d53b904"
2017-01-31 20:14:50,330 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hbase/sandbox.hortonworks.com@EXAMPLE.COM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hbase.protobuf.generated.ClientProtos$ClientService$BlockingInterface
2017-01-31 20:16:24,955 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Auth successful for hbase_user1@EXAMPLE.COM (auth:SIMPLE)
2017-01-31 20:16:24,956 INFO SecurityLogger.org.apache.hadoop.hbase.Server: Connection from 10.0.2.15 port: 39773 with version info: version: "1.1.2.2.4.0.0-169" url: "git://c66-slave-38a0b1a6-7/grid/0/jenkins/workspace/HDP-build-centos6/bigtop/build/hbase/rpm/BUILD/hbase-1.1.2.2.4.0.0" revision: "61dfb2b344f424a11f93b3f086eab815c1eb0b6a" user: "jenkins" date: "Wed Feb 10 07:08:51 UTC 2016" src_checksum: "afb8421bf497c0e82b9489877d53b904"
2017-01-31 20:16:24,957 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hbase_user1@EXAMPLE.COM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hbase.protobuf.generated.MasterProtos$MasterService$BlockingInterface ----------------------------------------------------------------------------------------------- However, the user is not able to see any of the tables.
Attaching the screenshot of Ranger policies - Global access to HBase tables is blocked, while access is provided
to tabe iemployee to user - hbase_user1. Also, pls note : service user - hbase is able to access all hbase tables What needs to be done to fix this access issue for user -> hbase_user1 ? Any pointers on this would be appreciated.
... View more
Labels: