kravii created HIVE-28547:
-----------------------------
Summary: Unsigned fragment not allowed while Running Hive LLAP
queries in Kerberized cluster
Key: HIVE-28547
URL: https://issues.apache.org/jira/browse/HIVE-28547
Project: Hive
Issue Type: Bug
Security Level: Public (Viewable by anyone)
Environment: Hadoop-3.3.6
Zookeeper - 3.8.4
Hive - 4.0.0
Reporter: kravii
Hive LLAP Logs -
{code:java}
2024-09-27T16:49:05,869 ERROR [HiveServer2-Background-Pool: Thread-178]:
SessionState (SessionState.java:printError(1387)) - Vertex failed,
vertexName=Map 8, vertexId=vertex_1727435326903_0002_1_00, diagnostics=[Task
failed, taskId=task_1727435326903_0002_1_00_000000, diagnostics=[TaskAttempt 0
failed,
info=[org.apache.hadoop.ipc.RemoteException(java.lang.SecurityException):
Unsigned fragment not allowed
at
org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.checkSignature(ContainerRunnerImpl.java:426)
at
org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.extractVertexSpec(ContainerRunnerImpl.java:395)
at
org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.submitWork(ContainerRunnerImpl.java:229)
at
org.apache.hadoop.hive.llap.daemon.impl.LlapDaemon.submitWork(LlapDaemon.java:656)
at
org.apache.hadoop.hive.llap.daemon.impl.LlapProtocolServerImpl.submitWork(LlapProtocolServerImpl.java:126)
at
org.apache.hadoop.hive.llap.daemon.rpc.LlapDaemonProtocolProtos$LlapDaemonProtocol$2.callBlockingMethod(LlapDaemonProtocolProtos.java:32621)
at
org.apache.hadoop.ipc.ProtobufRpcEngine$Server.processCall(ProtobufRpcEngine.java:484)
at
org.apache.hadoop.ipc.ProtobufRpcEngine2$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine2.java:595)
at
org.apache.hadoop.ipc.ProtobufRpcEngine2$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine2.java:573)
at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:1227)
at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:1094)
at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:1017)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at java.base/javax.security.auth.Subject.doAs(Subject.java:423)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1899)
at org.apache.hadoop.ipc.Server$Handler.run(Server.java:3048)
], TaskAttempt 1 failed,
info=[org.apache.hadoop.ipc.RemoteException(java.lang.SecurityException):
Unsigned fragment not allowed
2024-09-30T04:57:13,043 DEBUG [main]: metastore.HiveMetaStoreClient
(HiveMetaStoreClient.java:createAuthBinaryTransport(966)) - HMSC::open(): Could
not find delegation token. Creating KERBEROS-based thrift connection.
2024-09-30T04:57:13,050 DEBUG [main]: security.UserGroupInformation
(UserGroupInformation.java:doAs(1896)) - PrivilegedAction [as:
hive/[email protected] (auth:KERBEROS)][action:
org.apache.hadoop.hive.metastore.security.HadoopThriftAuthBridge$Client$1@5e905f2c]
java.lang.Exception: null {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)