[ https://issues.apache.org/jira/browse/AMBARI-20947?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16005693#comment-16005693 ]
Swapan Shridhar commented on AMBARI-20947: ------------------------------------------ branch-2.5 {code} commit f125f6059680572802f7a7dc9922e8379d0e5730 Author: Swapan Shridhar <sshrid...@hortonworks.com> Date: Wed May 10 14:01:59 2017 -0700 AMBARI-20947. Use keytab file named 'hive.service.keytab' instead of 'hive.llap.zk.sm.keytab' in hive_server_interactive.py for copying to slider. {code} trunk: {code} commit 242d9e76f93d17532a60296d86d4e42f7299e039 Author: Swapan Shridhar <sshrid...@hortonworks.com> Date: Wed May 10 17:02:42 2017 -0700 AMBARI-20947. Use keytab file named 'hive.service.keytab' instead of 'hive.llap.zk.sm.keytab' in hive_server_interactive.py for copying to slider. {code} > Use keytab file named 'hive.service.keytab' instead of > 'hive.llap.zk.sm.keytab' in hive_server_interactive.py for copying to slider. > ------------------------------------------------------------------------------------------------------------------------------------ > > Key: AMBARI-20947 > URL: https://issues.apache.org/jira/browse/AMBARI-20947 > Project: Ambari > Issue Type: Bug > Components: ambari-server > Affects Versions: trunk, 2.5.0 > Reporter: Swapan Shridhar > Assignee: Swapan Shridhar > Priority: Blocker > Fix For: trunk, 2.5.1 > > Attachments: AMBARI-20947.01.trunk.patch, AMBARI-20947.1.patch, > AMBARI-20947.patch > > > *Issue:* > HSI server start failed with "kinit: Key table file > '/etc/security/keytabs/hive.llap.zk.sm.keytab' not found while getting > initial credentials". > *Reason:* > This can happen when HSI is placed on a node where YARN's NodeManager node > doesn't exists. Thus, 'hive.llap.zk.sm.keytab' file wont get generated. > *Fix:* > Following are the principals in both keytab files: > {code} > [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# klist -kt > hive.service.keytab > Keytab name: FILE:hive.service.keytab > KVNO Timestamp Principal > ---- ----------------- > -------------------------------------------------------- > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# > [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# klist -kt > hive.llap.zk.sm.keytab > Keytab name: FILE:hive.llap.zk.sm.keytab > KVNO Timestamp Principal > ---- ----------------- > -------------------------------------------------------- > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > 2 05/03/17 20:57:16 > hive/ctr-e133-1493418528701-3077-01-000003.hwx.s...@example.com > [root@ctr-e133-1493418528701-3077-01-000003 keytabs]# > {code} > Given that *'hive.service.keytab'* and *'hive.llap.zk.sm.keytab'* contains > the same principals, we can use 'hive.service.keytab' for copying principals > to slider in HDFS. -- This message was sent by Atlassian JIRA (v6.3.15#6346)