[
https://issues.apache.org/jira/browse/HIVE-28547?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
kravii updated HIVE-28547:
--------------------------
Security: Public (was: Non-Public)
> Unsigned fragment not allowed while Running Hive LLAP queries in Kerberized
> cluster
> -----------------------------------------------------------------------------------
>
> Key: HIVE-28547
> URL: https://issues.apache.org/jira/browse/HIVE-28547
> Project: Hive
> Issue Type: Bug
> Security Level: Public(Viewable by anyone)
> Components: llap
> Affects Versions: 4.0.0
> Environment: Hadoop-3.3.6
> Zookeeper - 3.8.4
> Hive - 4.0.0
> Reporter: kravii
> Priority: Major
>
> Hive LLAP Logs -
> {code:java}
> 2024-09-27T16:49:05,869 ERROR [HiveServer2-Background-Pool: Thread-178]:
> SessionState (SessionState.java:printError(1387)) - Vertex failed,
> vertexName=Map 8, vertexId=vertex_1727435326903_0002_1_00, diagnostics=[Task
> failed, taskId=task_1727435326903_0002_1_00_000000, diagnostics=[TaskAttempt
> 0 failed,
> info=[org.apache.hadoop.ipc.RemoteException(java.lang.SecurityException):
> Unsigned fragment not allowed
> at
> org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.checkSignature(ContainerRunnerImpl.java:426)
> at
> org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.extractVertexSpec(ContainerRunnerImpl.java:395)
> at
> org.apache.hadoop.hive.llap.daemon.impl.ContainerRunnerImpl.submitWork(ContainerRunnerImpl.java:229)
> at
> org.apache.hadoop.hive.llap.daemon.impl.LlapDaemon.submitWork(LlapDaemon.java:656)
> at
> org.apache.hadoop.hive.llap.daemon.impl.LlapProtocolServerImpl.submitWork(LlapProtocolServerImpl.java:126)
> at
> org.apache.hadoop.hive.llap.daemon.rpc.LlapDaemonProtocolProtos$LlapDaemonProtocol$2.callBlockingMethod(LlapDaemonProtocolProtos.java:32621)
> at
> org.apache.hadoop.ipc.ProtobufRpcEngine$Server.processCall(ProtobufRpcEngine.java:484)
> at
> org.apache.hadoop.ipc.ProtobufRpcEngine2$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine2.java:595)
> at
> org.apache.hadoop.ipc.ProtobufRpcEngine2$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine2.java:573)
> at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:1227)
> at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:1094)
> at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:1017)
> at java.base/java.security.AccessController.doPrivileged(Native
> Method)
> at java.base/javax.security.auth.Subject.doAs(Subject.java:423)
> at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1899)
> at org.apache.hadoop.ipc.Server$Handler.run(Server.java:3048)
> ], TaskAttempt 1 failed,
> info=[org.apache.hadoop.ipc.RemoteException(java.lang.SecurityException):
> Unsigned fragment not allowed
> 2024-09-30T04:57:13,043 DEBUG [main]: metastore.HiveMetaStoreClient
> (HiveMetaStoreClient.java:createAuthBinaryTransport(966)) - HMSC::open():
> Could not find delegation token. Creating KERBEROS-based thrift connection.
> 2024-09-30T04:57:13,050 DEBUG [main]: security.UserGroupInformation
> (UserGroupInformation.java:doAs(1896)) - PrivilegedAction [as:
> hive/[email protected] (auth:KERBEROS)][action:
> org.apache.hadoop.hive.metastore.security.HadoopThriftAuthBridge$Client$1@5e905f2c]
> java.lang.Exception: null {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
