[
https://issues.apache.org/jira/browse/HIVE-16973?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sushanth Sowmyan updated HIVE-16973:
------------------------------------
Attachment: HIVE-16973.006-master.patch
> Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in
> HS2
> --------------------------------------------------------------------------------
>
> Key: HIVE-16973
> URL: https://issues.apache.org/jira/browse/HIVE-16973
> Project: Hive
> Issue Type: Bug
> Components: Accumulo Storage Handler
> Reporter: Josh Elser
> Assignee: Sushanth Sowmyan
> Attachments: HIVE-16973.001.patch, HIVE-16973.002.branch-2.patch,
> HIVE-16973.003.branch-2.patch, HIVE-16973.004-branch-2.patch,
> HIVE-16973.004.branch-2.patch, HIVE-16973.004-master.patch,
> HIVE-16973.005-master.patch, HIVE-16973.006-master.patch
>
>
> Had a report from a user that Kerberos+AccumuloStorageHandler+HS2 was broken.
> Looking into it, it seems like the bit-rot got pretty bad. You'll see
> something like the following:
> {noformat}
> Caused by: java.io.IOException: Failed to unwrap AuthenticationToken
> at
> org.apache.hadoop.hive.accumulo.HiveAccumuloHelper.unwrapAuthenticationToken(HiveAccumuloHelper.java:312)
>
> at
> org.apache.hadoop.hive.accumulo.mr.HiveAccumuloTableInputFormat.getSplits(HiveAccumuloTableInputFormat.java:122)
>
> {noformat}
> It appears that some of the code-paths changed since when I first did my
> testing (or I just did poor testing) and the delegation token was never being
> fetched/serialized. There also are some issues with fetching the delegation
> token from Accumulo properly which were addressed in ACCUMULO-4665
> I believe it would also be best to just update the dependency to use Accumulo
> 1.7 (drop 1.6 support) as it's lacking in this regard. These changes would
> otherwise get much more complicated with reflection -- Accumulo has moved on
> past 1.6, so let's do the same in Hive.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
