[ https://issues.apache.org/jira/browse/GRIFFIN-363?focusedWorklogId=616863&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-616863 ]
ASF GitHub Bot logged work on GRIFFIN-363: ------------------------------------------ Author: ASF GitHub Bot Created on: 30/Jun/21 01:44 Start Date: 30/Jun/21 01:44 Worklog Time Spent: 10m Work Description: lovelyqincai commented on a change in pull request #592: URL: https://github.com/apache/griffin/pull/592#discussion_r661071078 ########## File path: service/src/main/java/org/apache/griffin/core/metastore/hive/HiveMetaStoreProxy.java ########## @@ -55,6 +59,28 @@ Licensed to the Apache Software Foundation (ASF) under one private IMetaStoreClient client = null; + @Value("${hive.krb5conf.path}") + private String hiveKrb5confPath; + + @Value("${hive.keytab.path}") + private String keytabPath; + + @Value("${hive.keytab.user}") + private String keytabUser; + + @Value("${hive.need.kerberos}") + private String needKerberos; Review comment: ok,i also agree with. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@griffin.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org Issue Time Tracking ------------------- Worklog Id: (was: 616863) Remaining Estimate: 21h 40m (was: 21h 50m) Time Spent: 2h 20m (was: 2h 10m) > Hive kerberos for Griffin error > ------------------------------- > > Key: GRIFFIN-363 > URL: https://issues.apache.org/jira/browse/GRIFFIN-363 > Project: Griffin > Issue Type: Bug > Components: Service Module > Affects Versions: 0.6.0 > Environment: CentOS 7 > Reporter: MenghuiWan > Priority: Minor > Labels: kerberos > Original Estimate: 24h > Time Spent: 2h 20m > Remaining Estimate: 21h 40m > > i am sorry for my english is not well. > ---- > This is my problem: > i try to use griffin for data quality projects. > our enviroment is CDH 6.1.1 cluster with kerberos. > i want to connect hive then i set up all configurations about kerberos by > user guide. > but i found hive connection had failed. > ---- > error log is: > {quote}2021-06-15 13:33:01.418 WARN 102938 — [ main] h.metastore > [487] : Failed to connect to the MetaStore > Server...2021-06-15 13:33:01.418 WARN 102938 — [ main] h.metastore > [487] : Failed to connect to the MetaStore > Server...2021-06-15 13:33:01.418 INFO 102938 — [ main] h.metastore > [518] : Waiting 1 seconds before next connection > attempt.2021-06-15 13:33:02.419 INFO 102938 — [ main] h.metastore > [434] : Trying to connect to metastore with URI > thrift://xxxx.xxxx.com:90832021-06-15 13:33:02.422 ERROR 102938 — [ > main] o.a.t.t.TSaslTransport [315] : SASL negotiation > failure > javax.security.sasl.SaslException: GSS initiate failed at > com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211) > ~[?:1.8.0_131] at > org.apache.thrift.transport.TSaslClientTransport.handleSaslStartMessage(TSaslClientTransport.java:94) > ~[libthrift-0.9.3.jar:0.9.3] at > org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:271) > ~[libthrift-0.9.3.jar:0.9.3] at > org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) > ~[libthrift-0.9.3.jar:0.9.3] at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) > ~[hive-shims-common-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) > ~[hive-shims-common-2.2.0.jar:2.2.0] at > java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_131] at > javax.security.auth.Subject.doAs(Subject.java:422) ~[?:1.8.0_131] at > org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657) > ~[hadoop-common-2.7.1.jar:?] at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) > ~[hive-shims-common-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.open(HiveMetaStoreClient.java:478) > ~[hive-metastore-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:286) > ~[hive-metastore-2.2.0.jar:2.2.0] at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:211) > ~[hive-metastore-2.2.0.jar:2.2.0] at > org.apache.griffin.core.metastore.hive.HiveMetaStoreProxy.initHiveMetastoreClient(HiveMetaStoreProxy.java:68) > ~[service-0.7.0-SNAPSHOT.jar:0.7.0-SNAPSHOT] at > sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_131] at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > ~[?:1.8.0_131] at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > ~[?:1.8.0_131] at java.lang.reflect.Method.invoke(Method.java:498) > ~[?:1.8.0_131] at > org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:154) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:622) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:456) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateUsingFactoryMethod(AbstractAutowireCapableBeanFactory.java:1321) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1160) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:555) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:515) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:320) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:318) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:199) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:277) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1251) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1171) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredFieldElement.inject(AutowiredAnnotationBeanPostProcessor.java:593) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:90) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessProperties(AutowiredAnnotationBeanPostProcessor.java:374) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1411) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:592) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:515) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:320) > ~[spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:318) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:199) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:845) > [spring-beans-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:877) > [spring-context-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:549) > [spring-context-5.1.9.RELEASE.jar:5.1.9.RELEASE] at > org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:141) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.refresh(SpringApplication.java:743) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:390) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.run(SpringApplication.java:312) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.run(SpringApplication.java:1214) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.springframework.boot.SpringApplication.run(SpringApplication.java:1203) > [spring-boot-2.1.7.RELEASE.jar:2.1.7.RELEASE] at > org.apache.griffin.core.GriffinWebApplication.main(GriffinWebApplication.java:36) > [service-0.7.0-SNAPSHOT.jar:0.7.0-SNAPSHOT]Caused by: > org.ietf.jgss.GSSException: No valid credentials provided (Mechanism level: > Failed to find any Kerberos tgt) at > sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147) > ~[?:1.8.0_131] at > sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122) > ~[?:1.8.0_131] at > sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187) > ~[?:1.8.0_131] at > sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224) > ~[?:1.8.0_131] at > sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212) > ~[?:1.8.0_131] at > sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179) > ~[?:1.8.0_131] at > com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192) > ~[?:1.8.0_131] ... 51 more > {quote} -- This message was sent by Atlassian Jira (v8.3.4#803005)