[
https://issues.apache.org/jira/browse/HIVE-22590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16995216#comment-16995216
]
Mithun Radhakrishnan edited comment on HIVE-22590 at 12/13/19 12:01 AM:
------------------------------------------------------------------------
My apologies for not responding to this sooner. This sort of failure was
unintended. I'm supportive of reverting HIVE-17218, if required.
[~pvary], would you happen to know if HIVE-21899 sorts this out?
Edit: I'm not sure it will. With a load-balancer, it wouldn't be enough to
check if an IP address is returned instead of the hostname. The load-balancer
would have its own hostname and IP-address.
was (Author: mithun):
My apologies for not responding to this sooner. This sort of failure was
unintended. I'm supportive of reverting HIVE-17218, if required.
[~pvary], would you happen to know if HIVE-21899 sorts this out?
> Revert HIVE-17218 Canonical-ize hostnames for Hive metastore, and HS2 servers
> as it causes issues with SSL and LB
> -----------------------------------------------------------------------------------------------------------------
>
> Key: HIVE-22590
> URL: https://issues.apache.org/jira/browse/HIVE-22590
> Project: Hive
> Issue Type: Bug
> Reporter: Peter Vary
> Assignee: Peter Vary
> Priority: Major
>
> HIVE-17218 causes issues with Load balanced + SSL environments, like this:
> {code}
> java.net.SocketException: Socket is closed
> at sun.security.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1532)
> at sun.security.ssl.SSLSocketImpl.checkWrite(SSLSocketImpl.java:1553)
> at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:71)
> at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
> at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
> at java.io.FilterOutputStream.close(FilterOutputStream.java:158)
> at
> org.apache.thrift.transport.TIOStreamTransport.close(TIOStreamTransport.java:110)
>
> at org.apache.thrift.transport.TSocket.close(TSocket.java:235)
> at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:318)
> at
> org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37)
>
> at
> org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52)
>
> at
> org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49)
>
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.Subject.doAs(Subject.java:422)
> at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1917)
>
> at
> org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49)
>
> at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:204)
> at org.apache.hive.jdbc.HiveConnection.<init>(HiveConnection.java:169)
> at org.apache.hive.jdbc.HiveDriver.connect(HiveDriver.java:105)
> at java.sql.DriverManager.getConnection(DriverManager.java:664)
> at java.sql.DriverManager.getConnection(DriverManager.java:208)
> at
> org.apache.hive.beeline.DatabaseConnection.connect(DatabaseConnection.java:146)
>
> at
> org.apache.hive.beeline.DatabaseConnection.getConnection(DatabaseConnection.java:211)
>
> at org.apache.hive.beeline.Commands.connect(Commands.java:1496)
> at org.apache.hive.beeline.Commands.connect(Commands.java:1391)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>
> at java.lang.reflect.Method.invoke(Method.java:498)
> at
> org.apache.hive.beeline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:52)
>
> at org.apache.hive.beeline.BeeLine.execCommandWithPrefix(BeeLine.java:1135)
> at org.apache.hive.beeline.BeeLine.dispatch(BeeLine.java:1174)
> at org.apache.hive.beeline.BeeLine.execute(BeeLine.java:1010)
> at org.apache.hive.beeline.BeeLine.begin(BeeLine.java:922)
> at org.apache.hive.beeline.BeeLine.mainWithInputRedirection(BeeLine.java:518)
> at org.apache.hive.beeline.BeeLine.main(BeeLine.java:501)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.hadoop.util.RunJar.run(RunJar.java:221)
> at org.apache.hadoop.util.RunJar.main(RunJar.java:136)
> Unknown HS2 problem when communicating with Thrift server.
> Error: Could not open client transport with JDBC Uri: jdbc:hive2://<SNIPPED
> For privacy> GSS initiate failed
> Also, could not send response:
> org.apache.thrift.transport.TTransportException:
> javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException:
> No subject alternative names matching IP address 52
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
