[ https://issues.apache.org/jira/browse/GRIFFIN-363?focusedWorklogId=615383&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-615383 ]
ASF GitHub Bot logged work on GRIFFIN-363: ------------------------------------------ Author: ASF GitHub Bot Created on: 27/Jun/21 11:09 Start Date: 27/Jun/21 11:09 Worklog Time Spent: 10m Work Description: lovelyqincai commented on a change in pull request #592: URL: https://github.com/apache/griffin/pull/592#discussion_r659304138 ########## File path: service/src/main/java/org/apache/griffin/core/metastore/hive/HiveMetaStoreProxy.java ########## @@ -55,6 +59,28 @@ Licensed to the Apache Software Foundation (ASF) under one private IMetaStoreClient client = null; + @Value("${hive.krb5conf.path}") + private String hiveKrb5confPath; + + @Value("${hive.keytab.path}") Review comment: > Since kerberos doesnt apply to just hive but hadoop services in general, the "hive." prefix can be removed from all these configs. emmm, kerberos have many keytabs for different user,like hive,hdfs,livy and so on. i can see many keytab files name like hive.keytab,hdfs.keytab... how about keep the prefix? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@griffin.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org Issue Time Tracking ------------------- Worklog Id: (was: 615383) Remaining Estimate: 22h 20m (was: 22.5h) Time Spent: 1h 40m (was: 1.5h) > Hive kerberos for Griffin error > ------------------------------- > > Key: GRIFFIN-363 > URL: https://issues.apache.org/jira/browse/GRIFFIN-363 > Project: Griffin > Issue Type: Bug > Components: Service Module > Affects Versions: 0.6.0 > Environment: CentOS 7 > Reporter: MenghuiWan > Priority: Minor > Labels: kerberos > Original Estimate: 24h > Time Spent: 1h 40m > Remaining Estimate: 22h 20m > > i am sorry for my english is not well. > ---- > This is my problem: > i try to use griffin for data quality projects. > our enviroment is CDH 6.1.1 cluster with kerberos. > i want to connect hive then i set up all configurations about kerberos by > user guide. > but i found hive connection had failed. > ---- > error log is: > {quote}2021-06-15 13:33:01.418 WARN 102938 — [ main] h.metastore > [487] : Failed to connect to the MetaStore > Server...2021-06-15 13:33:01.418 WARN 102938 — [ main] h.metastore > [487] : Failed to connect to the MetaStore > Server...2021-06-15 13:33:01.418 INFO 102938 — [ main] h.metastore > [518] : Waiting 1 seconds before next connection > attempt.2021-06-15 13:33:02.419 INFO 102938 — [ main] h.metastore > [434] : Trying to connect to metastore with URI > thrift://xxxx.xxxx.com:90832021-06-15 13:33:02.422 ERROR 102938 — [ > main] o.a.t.t.TSaslTransport [315] : SASL negotiation > failure > javax.security.sasl.SaslException: GSS initiate failed at > com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211) > ~[?:1.8.0_131] at > org.apache.thrift.transport.TSaslClientTransport.handleSaslStartMessage(TSaslClientTransport.java:94) > ~[libthrift-0.9.3.jar:0.9.3] at > org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:271) > ~[libthrift-0.9.3.jar:0.9.3] at > org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) > ~[libthrift-0.9.3.jar:0.9.3] at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) > ~[hive-shims-common-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) > ~[hive-shims-common-2.2.0.jar:2.2.0] at > java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_131] at > javax.security.auth.Subject.doAs(Subject.java:422) ~[?:1.8.0_131] at > org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657) > ~[hadoop-common-2.7.1.jar:?] at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) > ~[hive-shims-common-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.open(HiveMetaStoreClient.java:478) > ~[hive-metastore-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:286) > ~[hive-metastore-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:211) > ~[hive-metastore-2.2.0.jar:2.2.0] at > org.apache.griffin.core.metastore.hive.HiveMetaStoreProxy.initHiveMetastoreClient(HiveMetaStoreProxy.java:68) > ~[service-0.7.0-SNAPSHOT.jar:0.7.0-SNAPSHOT] at > sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_131] at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > ~[?:1.8.0_131] at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > ~[?:1.8.0_131] at java.lang.reflect.Method.invoke(Method.java:498) > ~[?:1.8.0_131] at > org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:154) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:622) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:456) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateUsingFactoryMethod(AbstractAutowireCapableBeanFactory.java:1321) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1160) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:555) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:515) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:320) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:318) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:199) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:277) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1251) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1171) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredFieldElement.inject(AutowiredAnnotationBeanPostProcessor.java:593) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:90) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessProperties(AutowiredAnnotationBeanPostProcessor.java:374) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1411) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:592) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:515) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:320) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:318) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:199) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:845) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:877) > [spring-context-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:549) > [spring-context-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:141) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.refresh(SpringApplication.java:743) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:390) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.run(SpringApplication.java:312) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.run(SpringApplication.java:1214) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.run(SpringApplication.java:1203) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.apache.griffin.core.GriffinWebApplication.main(GriffinWebApplication.java:36) > [service-0.7.0-SNAPSHOT.jar:0.7.0-SNAPSHOT]Caused by: > org.ietf.jgss.GSSException: No valid credentials provided (Mechanism level: > Failed to find any Kerberos tgt) at > sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147) > ~[?:1.8.0_131] at > sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122) > ~[?:1.8.0_131] at > sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) > ~[?:1.8.0_131] at > sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224) > ~[?:1.8.0_131] at > sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) > ~[?:1.8.0_131] at > sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) > ~[?:1.8.0_131] at > com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192) > ~[?:1.8.0_131] ... 51 more > {quote} -- This message was sent by Atlassian Jira (v8.3.4#803005)