kravii created HIVE-28547:
-----------------------------

             Summary: Unsigned fragment not allowed while Running Hive LLAP 
queries in Kerberized cluster
                 Key: HIVE-28547
                 URL: https://issues.apache.org/jira/browse/HIVE-28547
             Project: Hive
          Issue Type: Bug
      Security Level: Public (Viewable by anyone)
         Environment: Hadoop-3.3.6

Zookeeper - 3.8.4

Hive - 4.0.0
            Reporter: kravii


Hive LLAP Logs - 
{code:java}
2024-09-27T16:49:05,869 ERROR [HiveServer2-Background-Pool: Thread-178]: 
SessionState (SessionState.java:printError(1387)) - Vertex failed, 
vertexName=Map 8, vertexId=vertex_1727435326903_0002_1_00, diagnostics=[Task 
failed, taskId=task_1727435326903_0002_1_00_000000, diagnostics=[TaskAttempt 0 
failed, 
info=[org.apache.hadoop.ipc.RemoteException(java.lang.SecurityException): 
Unsigned fragment not allowed
        at 
org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.checkSignature(ContainerRunnerImpl.java:426)
        at 
org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.extractVertexSpec(ContainerRunnerImpl.java:395)
        at 
org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.submitWork(ContainerRunnerImpl.java:229)
        at 
org.apache.hadoop.hive.llap.daemon.impl.LlapDaemon.submitWork(LlapDaemon.java:656)
        at 
org.apache.hadoop.hive.llap.daemon.impl.LlapProtocolServerImpl.submitWork(LlapProtocolServerImpl.java:126)
        at 
org.apache.hadoop.hive.llap.daemon.rpc.LlapDaemonProtocolProtos$LlapDaemonProtocol$2.callBlockingMethod(LlapDaemonProtocolProtos.java:32621)
        at 
org.apache.hadoop.ipc.ProtobufRpcEngine$Server.processCall(ProtobufRpcEngine.java:484)
        at 
org.apache.hadoop.ipc.ProtobufRpcEngine2$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine2.java:595)
        at 
org.apache.hadoop.ipc.ProtobufRpcEngine2$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine2.java:573)
        at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:1227)
        at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:1094)
        at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:1017)
        at java.base/java.security.AccessController.doPrivileged(Native Method)
        at java.base/javax.security.auth.Subject.doAs(Subject.java:423)
        at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1899)
        at org.apache.hadoop.ipc.Server$Handler.run(Server.java:3048)
], TaskAttempt 1 failed, 
info=[org.apache.hadoop.ipc.RemoteException(java.lang.SecurityException): 
Unsigned fragment not allowed

2024-09-30T04:57:13,043 DEBUG [main]: metastore.HiveMetaStoreClient 
(HiveMetaStoreClient.java:createAuthBinaryTransport(966)) - HMSC::open(): Could 
not find delegation token. Creating KERBEROS-based thrift connection.
2024-09-30T04:57:13,050 DEBUG [main]: security.UserGroupInformation 
(UserGroupInformation.java:doAs(1896)) - PrivilegedAction [as: 
hive/[email protected] (auth:KERBEROS)][action: 
org.apache.hadoop.hive.metastore.security.HadoopThriftAuthBridge$Client$1@5e905f2c]
java.lang.Exception: null {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to