I implemented the patch available in
https://issues.apache.org/jira/browse/OOZIE-889 and made the changes for
<credentials> in oozie workflow. Oozie 3.1.3 had to be installed.
I had to add the following in oozie-site.xml
<property>
<name>oozie.credentials.credentialclasses</name>
<value>hcat=org.apache.oozie.action.hadoop.HCatCredentials</value>
<description>
A list of credential class mapping for CredentialsProvider
</description>
</property>
Hcatalog works perfectly with oozie now.
Sending this mail as I thought of recording the steps with the user-group
Thanks a lot for all the help provided folks.
~Rajesh.B
On Sun, Jul 8, 2012 at 7:15 AM, Rajesh Balamohan <[email protected]
> wrote:
> Hi Rohini,
>
> Looks like Credentials module was available in lastest versions of oozie.
> We earlier had 2.x version of oozie which was throwing schema errors with
> credentials.
>
> We upgraded to oozie 3.1.3 and tried out this.
>
> However, still its not able to get the delegation token and throws GSS
> exception in server side of hcatalog.
>
> Caused by: org.apache.thrift.transport.TTransportException: Peer indicated
> failure: GSS initiate failed
> at
> org.apache.thrift.transport.TSaslTransport.receiveSaslMessage(TSaslTransport.java:190)
> at
> org.apache.thrift.transport.TSaslServerTransport.handleSaslStartMessage(TSaslServerTransport.java:124)
> at
> org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:253)
> at
> org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:40)
> at
> org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:215)
> ... 10 more
>
>
> Could it be due to the following
> https://issues.apache.org/jira/browse/OOZIE-889 JIRA?
>
> Thanks again for being very helpful.
>
>
> ~Rajesh.B
>
> On Sat, Jul 7, 2012 at 12:25 PM, Rajesh Balamohan <
> [email protected]> wrote:
>
>> Thanks a bunch Rohini. I didnt add this earlier. Will try this.
>>
>> ~Rajesh.B
>>
>>
>> On Sat, Jul 7, 2012 at 12:19 PM, Rohini Palaniswamy <
>> [email protected]> wrote:
>>
>>> You need to add hcat credentials(delegation token) to your pig action.
>>> Oozie will get the delegation token from hcat and add it to the
>>> credentials
>>> of the Job it launches.
>>>
>>> Example:
>>> <credentials>
>>> <credential name="hcat_auth" type="hcat">
>>> <property>
>>> <name>hcat.metastore.uri</name>
>>> <value>thrift://<hcathost>:<hcatport></value>
>>> </property>
>>> <property>
>>> <name>hcat.metastore.principal</name>
>>> <value>hcat/<hcathost>@KDCREALM</value>
>>> </property>
>>> </credential>
>>> </credentials>
>>> <action name="somejob" cred="hcat_auth">
>>> ....
>>>
>>> Regards,
>>> Rohini
>>>
>>>
>>> On Fri, Jul 6, 2012 at 3:58 AM, Rajesh Balamohan <
>>> [email protected]
>>> > wrote:
>>>
>>> > Hi All,
>>> >
>>> > I have security enabled (kerberos) hadoop cluster 0.20.205x with Pig
>>> 0.9.3
>>> > and Hcatalog 0.4.1
>>> >
>>> > When I try to run HCatalog with PIG in standalone grunt, it works
>>> great.
>>> >
>>> > However, when I embed the same PIG script in oozie, it throws GSS
>>> transport
>>> > exception like the one mentioned in HCATALOG-366.
>>> >
>>> > Does HCatalog 0.4.1 work with oozie in secured mode?
>>> >
>>> > Any pointers would be great help.
>>> >
>>> > --
>>> > ~Rajesh.B
>>> >
>>>
>>
>>
>>
>> --
>> ~Rajesh.B
>>
>
>
>
> --
> ~Rajesh.B
>
--
~Rajesh.B
