Member since
11-15-2017
1
Post
0
Kudos Received
0
Solutions
04-25-2018
12:45 PM
Hi Elif, On my case problem is not using the correct ticket. I was exporting ticket everytime and after kinit it was able to get ticket but since time to time I was not using the latest process's ticket. ============================================================================ One example below : the output of hive.keytab [root@bdw1n07 sbilgic]# klist -k -t -e hive.keytab Keytab name: FILE:hive.keytab KVNO Timestamp Principal ---- ----------------- ---------------------------------------------------------------------------------------------------------------------- 13 02/27/18 08:58:51 hive/......................................@...................................... (aes256-cts-hmac-sha1-96) 13 02/27/18 08:58:51 hive/......................................@...................................... (aes128-cts-hmac-sha1-96) 13 02/27/18 08:58:51 hive/......................................@...................................... (des3-cbc-sha1) 13 02/27/18 08:58:51 hive/......................................@...................................... (arcfour-hmac) 13 02/27/18 08:58:51 hive/......................................@...................................... (des-hmac-sha1) 13 02/27/18 08:58:51 hive/......................................@I...................................... (des-cbc-md5) ============================================================================ Clearly, the hive.keytab above has not been generated by Cloudera Manager, instead, it has been created from kadmin or kadmin.local once that happens the keytab generated by Cloudera Manager fails with the checksum. I used a copy of hive.keytab generated from Cloudera Manager copying it from the process directory. ***Not that the command: kinit -kt /var/run/cloudera-scm-agent/process/`ls -1 /var/run/cloudera-scm-agent/process | grep HIVESERVER2 | sort -n | tail -1`/hive.keytab hive/$(hostname -f) kinit with the latest process directory for hive from /var/run/cloudera-scm-agent/process/ ***the latest process directory is collected with the command below: ls -ltr /var/run/cloudera-scm-agent/process/ | grep HIVESERVER2 ***Note that the hive.keytab under the process directory /var/run/cloudera-scm-agent/process/NNN-hive-HIVESERVER2/hive.keytab Has principals for hive and HTTP once the customer has configured HiveServer2 WebUI. So, if you are doing, do not export keytab from kadmin or kadmin.local, unless you are willing to configure Hive to use that keytab. Instead get a copy of the hive.keytab from the process directory: /var/run/cloudera-scm-agent/process/NNN-hive-HIVESERVER2/hive.keytab Please let me know if you have further questions.
... View more