[
https://issues.apache.org/jira/browse/AMBARI-25511?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dmitry Lysnichenko reassigned AMBARI-25511:
-------------------------------------------
Assignee: Dmitry Lysnichenko
> hive auth fallback to SIMPLE because startup script fail to do kerberos login
> -----------------------------------------------------------------------------
>
> Key: AMBARI-25511
> URL: https://issues.apache.org/jira/browse/AMBARI-25511
> Project: Ambari
> Issue Type: Bug
> Reporter: Rajkumar Singh
> Assignee: Dmitry Lysnichenko
> Priority: Major
>
> There is problem with ambari startup script in secure environment, before
> starting the hiveserver2, it triggers the hadoop run jar
> (org.apache.hadoop.util.RunJar) where it authenticated himself using kerberos
> and push the credential to subject but this is not happening. KrbLoginModule
> looks for a ticket in the cache and did not find it.
> Failure of auth leads to failure of hdfs call until hive do loginfromkeytab
> explicitly.
>
> I tried a small hack where I modified the startHiveserver2.sh.j2 template by
> including the knit with the service keytab and principal which works as
> expected.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)