[ https://issues.apache.org/jira/browse/AMBARI-25511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17129191#comment-17129191 ]
Dmitry Lysnichenko commented on AMBARI-25511: --------------------------------------------- The issue here is that stack_features.json contains a max version for the hive_server2_kerberized_env variable. That's why kinit is skipped on a newer stack version > hive auth fallback to SIMPLE because startup script fail to do kerberos login > ----------------------------------------------------------------------------- > > Key: AMBARI-25511 > URL: https://issues.apache.org/jira/browse/AMBARI-25511 > Project: Ambari > Issue Type: Bug > Reporter: Rajkumar Singh > Assignee: Dmitry Lysnichenko > Priority: Major > > There is problem with ambari startup script in secure environment, before > starting the hiveserver2, it triggers the hadoop run jar > (org.apache.hadoop.util.RunJar) where it authenticated himself using kerberos > and push the credential to subject but this is not happening. KrbLoginModule > looks for a ticket in the cache and did not find it. > Failure of auth leads to failure of hdfs call until hive do loginfromkeytab > explicitly. > > I tried a small hack where I modified the startHiveserver2.sh.j2 template by > including the knit with the service keytab and principal which works as > expected. -- This message was sent by Atlassian Jira (v8.3.4#803005)