> On Feb. 2, 2017, 9:15 p.m., Hao Hao wrote: > > sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/service/thrift/HMSFollower.java, > > line 171 > > <https://reviews.apache.org/r/56191/diff/4/?file=1622351#file1622351line171> > > > > Can you add a comment to saying SentryKerberosContext handles TGT > > renewals?
Sure will add a comment to explain this. - Vamsee ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/56191/#review164016 ----------------------------------------------------------- On Feb. 2, 2017, 6:34 p.m., Vamsee Yarlagadda wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/56191/ > ----------------------------------------------------------- > > (Updated Feb. 2, 2017, 6:34 p.m.) > > > Review request for sentry, Alexander Kolbasov, Lei Xu, Hao Hao, kalyan kumar > kalvagadda, and Vadim Spector. > > > Repository: sentry > > > Description > ------- > > SENTRY-1619: Fix the secure HMS connection code in HMSFollower > -- HMSFollower has bugs in implementing logic that's preventing secure HMS > connection from taking place. > > 1. Need to use the right principal and keytab to use for the connection. > 2. Fix the while blocks to allow the connection setup to happen. > > > Diffs > ----- > > > sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/service/thrift/HMSFollower.java > 749c2ce8f89fe5960af5a4b48ff45a38091350f4 > > Diff: https://reviews.apache.org/r/56191/diff/ > > > Testing > ------- > > Sentry server log: > ```bash > 2017-02-01 14:02:48,537 INFO org.apache.sentry.service.thrift.HMSFollower: > HMSFollower is being initialized > 2017-02-01 14:02:50,545 INFO DataNucleus.Persistence: Property > datanucleus.cache.level2 unknown - will be ignored > 2017-02-01 14:02:51,911 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 14:02:57,186 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 14:02:57,335 INFO org.apache.sentry.service.thrift.SentryService: > Attempting to start... > 2017-02-01 14:02:57,345 INFO > org.apache.sentry.service.thrift.SentryKerberosContext: Logging in with new > Context > 2017-02-01 14:02:57,403 INFO org.apache.sentry.service.thrift.SentryService: > ProcessorFactory being used: > org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessorFactory > 2017-02-01 14:02:57,711 INFO DataNucleus.Persistence: Property > datanucleus.cache.level2 unknown - will be ignored > 2017-02-01 14:02:58,969 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 14:02:59,035 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 14:02:59,533 INFO org.apache.sentry.hdfs.SentryPlugin: Sentry HDFS > plugin initialized !! > 2017-02-01 14:02:59,561 INFO org.apache.sentry.service.thrift.SentryService: > ProcessorFactory being used: > org.apache.sentry.provider.db.generic.service.thrift.SentryGenericPolicyProcessorFactory > 2017-02-01 14:02:59,699 INFO DataNucleus.Persistence: Property > datanucleus.cache.level2 unknown - will be ignored > 2017-02-01 14:03:00,776 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 14:03:00,854 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 14:03:00,917 INFO org.apache.sentry.service.thrift.SentryService: > ProcessorFactory being used: > org.apache.sentry.hdfs.SentryHDFSServiceProcessorFactory > 2017-02-01 14:03:00,917 INFO > org.apache.sentry.hdfs.SentryHDFSServiceProcessorFactory: Calling > registerProcessor from SentryHDFSServiceProcessorFactory > 2017-02-01 14:03:00,945 INFO org.apache.sentry.service.thrift.SentryService: > Serving on nightly-1.gce.cloudera.com/172.31.112.33:8038 > 2017-02-01 14:03:01,133 INFO org.eclipse.jetty.server.Server: > jetty-7.6.16.v20140903 > 2017-02-01 14:03:01,159 INFO org.eclipse.jetty.server.handler.ContextHandler: > started o.e.j.s.h.ContextHandler{/,null} > 2017-02-01 14:03:01,180 INFO org.eclipse.jetty.server.handler.ContextHandler: > started o.e.j.s.ServletContextHandler{/,null} > 2017-02-01 14:03:01,211 INFO org.eclipse.jetty.server.AbstractConnector: > Started [email protected]:29000 > 2017-02-01 14:03:01,510 WARN org.apache.sentry.hdfs.SentryPlugin: Recieved > Authz Path FULL update [6].. > > 2017-02-01 14:04:23,514 INFO org.apache.sentry.service.thrift.HMSFollower: > Making a kerberos connection to HMS > 2017-02-01 14:04:46,255 INFO org.apache.sentry.service.thrift.HMSFollower: > Using kerberos principal: sentry/[email protected] > 2017-02-01 14:05:15,016 INFO > org.apache.sentry.service.thrift.SentryKerberosContext: Logging in with new > Context > 2017-02-01 14:05:20,783 INFO org.apache.sentry.service.thrift.HMSFollower: > Established kerberos context, will now connect to HMS > 2017-02-01 14:05:35,212 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 14:05:37,210 INFO hive.metastore: Opened a connection to > metastore, current connections: 1 > 2017-02-01 14:05:37,212 INFO hive.metastore: Connected to metastore. > > ``` > > > Sentry server log (Intentionally bringing down HMS makes the HMSFollower > thread to start the processing again) > ```bash > 2017-02-01 19:03:41,793 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:03:47,708 ERROR org.apache.sentry.service.thrift.HMSFollower: > Cannot connect to HMS > java.security.PrivilegedActionException: MetaException(message:Could not > connect to meta store using any of the URIs provided. Most recent failure: > org.apache.thrift.transport.TTransportException: java.net.ConnectException: > Connection refused > at org.apache.thrift.transport.TSocket.open(TSocket.java:226) > at > org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:266) > at > org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) > at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) > at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) > at java.security.AccessController.doPrivileged(Native Method) > at javax.security.auth.Subject.doAs(Subject.java:415) > at > org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1848) > at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.open(HiveMetaStoreClient.java:464) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:244) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:187) > at > org.apache.sentry.service.thrift.HMSFollower$1.run(HMSFollower.java:179) > at > org.apache.sentry.service.thrift.HMSFollower$1.run(HMSFollower.java:176) > at java.security.AccessController.doPrivileged(Native Method) > at javax.security.auth.Subject.doAs(Subject.java:415) > at > org.apache.sentry.service.thrift.HMSFollower.getMetaStoreClient(HMSFollower.java:176) > at > org.apache.sentry.service.thrift.HMSFollower.run(HMSFollower.java:206) > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) > at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) > at > java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) > at > java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) > at java.lang.Thread.run(Thread.java:745) > Caused by: java.net.ConnectException: Connection refused > at java.net.PlainSocketImpl.socketConnect(Native Method) > at > java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) > at > java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) > at > java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) > at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) > at java.net.Socket.connect(Socket.java:579) > at org.apache.thrift.transport.TSocket.open(TSocket.java:221) > ... 24 more > ) > at java.security.AccessController.doPrivileged(Native Method) > at javax.security.auth.Subject.doAs(Subject.java:415) > at > org.apache.sentry.service.thrift.HMSFollower.getMetaStoreClient(HMSFollower.java:176) > at > org.apache.sentry.service.thrift.HMSFollower.run(HMSFollower.java:206) > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) > at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) > at > java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) > at > java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) > at java.lang.Thread.run(Thread.java:745) > Caused by: MetaException(message:Could not connect to meta store using any of > the URIs provided. Most recent failure: > org.apache.thrift.transport.TTransportException: java.net.ConnectException: > Connection refused > at org.apache.thrift.transport.TSocket.open(TSocket.java:226) > at > org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:266) > at > org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) > at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) > at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) > at java.security.AccessController.doPrivileged(Native Method) > at javax.security.auth.Subject.doAs(Subject.java:415) > at > org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1848) > at > org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.open(HiveMetaStoreClient.java:464) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:244) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:187) > at > org.apache.sentry.service.thrift.HMSFollower$1.run(HMSFollower.java:179) > at > org.apache.sentry.service.thrift.HMSFollower$1.run(HMSFollower.java:176) > at java.security.AccessController.doPrivileged(Native Method) > at javax.security.auth.Subject.doAs(Subject.java:415) > at > org.apache.sentry.service.thrift.HMSFollower.getMetaStoreClient(HMSFollower.java:176) > at > org.apache.sentry.service.thrift.HMSFollower.run(HMSFollower.java:206) > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) > at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) > at > java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) > at > java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) > at java.lang.Thread.run(Thread.java:745) > Caused by: java.net.ConnectException: Connection refused > at java.net.PlainSocketImpl.socketConnect(Native Method) > at > java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) > at > java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) > at > java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) > at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) > at java.net.Socket.connect(Socket.java:579) > at org.apache.thrift.transport.TSocket.open(TSocket.java:221) > ... 24 more > ) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.open(HiveMetaStoreClient.java:512) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:244) > at > org.apache.hadoop.hive.metastore.HiveMetaStoreClient.<init>(HiveMetaStoreClient.java:187) > at > org.apache.sentry.service.thrift.HMSFollower$1.run(HMSFollower.java:179) > at > org.apache.sentry.service.thrift.HMSFollower$1.run(HMSFollower.java:176) > ... 11 more > 2017-02-01 19:11:34,913 INFO org.apache.sentry.SentryMain: Configuring log4j > to use > [/var/run/cloudera-scm-agent/process/745-sentry-SENTRY_SERVER/sentry-log4j.properties] > 2017-02-01 19:11:35,364 INFO org.apache.sentry.service.thrift.SentryService: > Configured on address nightly-1.gce.cloudera.com/172.31.112.33:8038 > 2017-02-01 19:11:35,371 INFO org.apache.sentry.service.thrift.SentryService: > Using kerberos principal: sentry/[email protected] > 2017-02-01 19:11:35,402 INFO > org.apache.sentry.service.thrift.LeaderStatusMonitor: Leader election > protocol disabled, assuming single active server > 2017-02-01 19:11:36,746 INFO org.apache.sentry.service.thrift.HMSFollower: > HMSFollower is being initialized > 2017-02-01 19:11:37,795 INFO DataNucleus.Persistence: Property > datanucleus.cache.level2 unknown - will be ignored > 2017-02-01 19:11:38,272 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 19:11:41,771 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 19:11:41,868 INFO org.apache.sentry.service.thrift.SentryService: > Attempting to start... > 2017-02-01 19:11:41,874 INFO > org.apache.sentry.service.thrift.SentryKerberosContext: Logging in with new > Context > 2017-02-01 19:11:41,917 INFO org.apache.sentry.service.thrift.SentryService: > ProcessorFactory being used: > org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessorFactory > 2017-02-01 19:11:42,047 INFO DataNucleus.Persistence: Property > datanucleus.cache.level2 unknown - will be ignored > > > 2017-02-01 19:11:43,213 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > > 2017-02-01 19:11:43,321 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > > 2017-02-01 19:11:43,422 INFO org.apache.sentry.service.thrift.SentryService: > ProcessorFactory being used: > org.apache.sentry.provider.db.generic.service.thrift.SentryGenericPolicyProcessorFactory > > 2017-02-01 19:11:43,789 INFO DataNucleus.Persistence: Property > datanucleus.cache.level2 unknown - will be ignored > 2017-02-01 19:11:45,182 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 19:11:45,281 WARN com.jolbox.bonecp.BoneCPConfig: Max Connections > < 1. Setting to 20 > 2017-02-01 19:11:45,395 INFO org.apache.sentry.service.thrift.SentryService: > Serving on nightly-1.gce.cloudera.com/172.31.112.33:8038 > 2017-02-01 19:11:45,566 INFO org.eclipse.jetty.server.Server: > jetty-7.6.16.v20140903 > 2017-02-01 19:11:45,581 INFO org.eclipse.jetty.server.handler.ContextHandler: > started o.e.j.s.h.ContextHandler{/,null} > 2017-02-01 19:11:45,593 INFO org.eclipse.jetty.server.handler.ContextHandler: > started o.e.j.s.ServletContextHandler{/,null} > 2017-02-01 19:11:45,615 INFO org.eclipse.jetty.server.AbstractConnector: > Started [email protected]:29000 > 2017-02-01 19:12:42,458 INFO org.apache.sentry.service.thrift.HMSFollower: > Making a kerberos connection to HMS > 2017-02-01 19:12:42,458 INFO org.apache.sentry.service.thrift.HMSFollower: > Using kerberos principal: sentry/[email protected] > 2017-02-01 19:12:42,459 INFO > org.apache.sentry.service.thrift.SentryKerberosContext: Logging in with new > Context > 2017-02-01 19:12:42,461 INFO org.apache.sentry.service.thrift.HMSFollower: > Established kerberos context, will now connect to HMS > 2017-02-01 19:13:19,631 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:21,035 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:21,035 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:22,035 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:22,064 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:22,064 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:23,065 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:23,077 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:23,077 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:24,077 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:24,099 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:24,099 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:25,099 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:25,120 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:25,120 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:34,414 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:34,418 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:34,418 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:35,418 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:35,421 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:35,421 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:36,421 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:36,424 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:36,424 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:37,425 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:37,427 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:37,428 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:38,428 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:38,431 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:38,431 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:42,436 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:42,438 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:42,439 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:43,439 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:43,444 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:43,444 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:44,444 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:44,447 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:44,447 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:45,447 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:45,449 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:45,450 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:46,450 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:46,451 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:46,451 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:50,455 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:50,458 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:50,458 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:51,458 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:51,460 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:51,460 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:52,460 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:52,463 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:52,463 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:53,463 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:53,465 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:53,465 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:13:54,465 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:13:54,468 WARN hive.metastore: Failed to connect to the > MetaStore Server... > 2017-02-01 19:13:54,468 INFO hive.metastore: Waiting 1 seconds before next > connection attempt. > 2017-02-01 19:14:07,218 ERROR org.apache.sentry.service.thrift.HMSFollower: > HMSFollower cannot connect to HMS!! > 2017-02-01 19:14:07,991 INFO org.apache.sentry.service.thrift.HMSFollower: > Making a kerberos connection to HMS > 2017-02-01 19:14:07,992 INFO org.apache.sentry.service.thrift.HMSFollower: > Using kerberos principal: sentry/[email protected] > 2017-02-01 19:14:07,993 INFO > org.apache.sentry.service.thrift.SentryKerberosContext: Logging in with new > Context > 2017-02-01 19:14:07,998 INFO org.apache.sentry.service.thrift.HMSFollower: > Established kerberos context, will now connect to HMS > 2017-02-01 19:23:01,286 INFO hive.metastore: Trying to connect to metastore > with URI thrift://nightly-1.gce.cloudera.com:9083 > 2017-02-01 19:23:01,479 INFO hive.metastore: Opened a connection to > metastore, current connections: 1 > 2017-02-01 19:23:01,480 INFO hive.metastore: Connected to metastore. > 2017-02-01 19:23:01,480 INFO org.apache.sentry.service.thrift.HMSFollower: > Secure connection established with HMS > ``` > > > Thanks, > > Vamsee Yarlagadda > >
