Hi, did you find a solution? I am experiencing the same issue in two CDH 5.6.1 clusters with HS2 HA+SSL and no HMS HA.   Basically HiveServer2 Oozie actions login to HiveServer2 via beeline and auth themself via delegation tokens pre-acquired by the Oozie server and passed in the YARN job container. If it happens that the HiveServer2 used (via the load balancer) by the Oozie Server is different from the one used by the Oozie HiveAction2 job the error fires saying the delegation token is not valid. I only know that I have to store Hive Metastore Server delegation tokens in the metastore DB if you have multiple HMS but this is not my case because I only have one HMS (I had two in the past but I had to move back to one due to Sentry ACL Sync requirements).   I am also submitting the Oozie job via a proxy user with the doAs option but I don't think it would matter because the delegation token is correctly requested by the Oozie server for the doAs user.   Any help from Cloudera?   Regards, Stefano ... View more