Rajesh, Sorry. I missed mentioning the oozie server side configuration. Took for granted that you had oozie configured :). Just realized after your mail that it is not part of open source oozie release. I think we should make this info part of hcat documentation. Would be very useful for others. Can you contribute the instructions you followed to the hcatalog wiki page?
-Rohini On Sat, Jul 7, 2012 at 10:46 PM, Rajesh Balamohan < [email protected]> wrote: > I implemented the patch available in > https://issues.apache.org/jira/browse/OOZIE-889 and made the changes for > <credentials> in oozie workflow. Oozie 3.1.3 had to be installed. > > I had to add the following in oozie-site.xml > > <property> > <name>oozie.credentials.credentialclasses</name> > <value>hcat=org.apache.oozie.action.hadoop.HCatCredentials</value> > <description> > A list of credential class mapping for CredentialsProvider > </description> > </property> > > > Hcatalog works perfectly with oozie now. > > Sending this mail as I thought of recording the steps with the user-group > > Thanks a lot for all the help provided folks. > > ~Rajesh.B > > On Sun, Jul 8, 2012 at 7:15 AM, Rajesh Balamohan < > [email protected] > > wrote: > > > Hi Rohini, > > > > Looks like Credentials module was available in lastest versions of oozie. > > We earlier had 2.x version of oozie which was throwing schema errors with > > credentials. > > > > We upgraded to oozie 3.1.3 and tried out this. > > > > However, still its not able to get the delegation token and throws GSS > > exception in server side of hcatalog. > > > > Caused by: org.apache.thrift.transport.TTransportException: Peer > indicated > > failure: GSS initiate failed > > at > > > org.apache.thrift.transport.TSaslTransport.receiveSaslMessage(TSaslTransport.java:190) > > at > > > org.apache.thrift.transport.TSaslServerTransport.handleSaslStartMessage(TSaslServerTransport.java:124) > > at > > org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:253) > > at > > > org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:40) > > at > > > org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:215) > > ... 10 more > > > > > > Could it be due to the following > > https://issues.apache.org/jira/browse/OOZIE-889 JIRA? > > > > Thanks again for being very helpful. > > > > > > ~Rajesh.B > > > > On Sat, Jul 7, 2012 at 12:25 PM, Rajesh Balamohan < > > [email protected]> wrote: > > > >> Thanks a bunch Rohini. I didnt add this earlier. Will try this. > >> > >> ~Rajesh.B > >> > >> > >> On Sat, Jul 7, 2012 at 12:19 PM, Rohini Palaniswamy < > >> [email protected]> wrote: > >> > >>> You need to add hcat credentials(delegation token) to your pig action. > >>> Oozie will get the delegation token from hcat and add it to the > >>> credentials > >>> of the Job it launches. > >>> > >>> Example: > >>> <credentials> > >>> <credential name="hcat_auth" type="hcat"> > >>> <property> > >>> <name>hcat.metastore.uri</name> > >>> <value>thrift://<hcathost>:<hcatport></value> > >>> </property> > >>> <property> > >>> <name>hcat.metastore.principal</name> > >>> <value>hcat/<hcathost>@KDCREALM</value> > >>> </property> > >>> </credential> > >>> </credentials> > >>> <action name="somejob" cred="hcat_auth"> > >>> .... > >>> > >>> Regards, > >>> Rohini > >>> > >>> > >>> On Fri, Jul 6, 2012 at 3:58 AM, Rajesh Balamohan < > >>> [email protected] > >>> > wrote: > >>> > >>> > Hi All, > >>> > > >>> > I have security enabled (kerberos) hadoop cluster 0.20.205x with Pig > >>> 0.9.3 > >>> > and Hcatalog 0.4.1 > >>> > > >>> > When I try to run HCatalog with PIG in standalone grunt, it works > >>> great. > >>> > > >>> > However, when I embed the same PIG script in oozie, it throws GSS > >>> transport > >>> > exception like the one mentioned in HCATALOG-366. > >>> > > >>> > Does HCatalog 0.4.1 work with oozie in secured mode? > >>> > > >>> > Any pointers would be great help. > >>> > > >>> > -- > >>> > ~Rajesh.B > >>> > > >>> > >> > >> > >> > >> -- > >> ~Rajesh.B > >> > > > > > > > > -- > > ~Rajesh.B > > > > > > -- > ~Rajesh.B >
