[
https://issues.apache.org/jira/browse/AMBARI-25511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17129191#comment-17129191
]
Dmitry Lysnichenko commented on AMBARI-25511:
---------------------------------------------
The issue here is that stack_features.json contains a max version for the
hive_server2_kerberized_env variable. That's why kinit is skipped on a newer
stack version
> hive auth fallback to SIMPLE because startup script fail to do kerberos login
> -----------------------------------------------------------------------------
>
> Key: AMBARI-25511
> URL: https://issues.apache.org/jira/browse/AMBARI-25511
> Project: Ambari
> Issue Type: Bug
> Reporter: Rajkumar Singh
> Assignee: Dmitry Lysnichenko
> Priority: Major
>
> There is problem with ambari startup script in secure environment, before
> starting the hiveserver2, it triggers the hadoop run jar
> (org.apache.hadoop.util.RunJar) where it authenticated himself using kerberos
> and push the credential to subject but this is not happening. KrbLoginModule
> looks for a ticket in the cache and did not find it.
> Failure of auth leads to failure of hdfs call until hive do loginfromkeytab
> explicitly.
>
> I tried a small hack where I modified the startHiveserver2.sh.j2 template by
> including the knit with the service keytab and principal which works as
> expected.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
