Hi Kristopher, Oozie has to do some extra work to get the delegation token from HS2. I'm planning on putting up a patch soonish for a Hive Server 2 action, which will include a way to get the token; see OOZIE-1457 <https://issues.apache.org/jira/browse/OOZIE-1457>.
In the meantime, If you're using CDH (Cloudera), then we have a little "hack" that lets you use the Hive action with Hive Server 2, and it includes the necessary code for handling the Hive Server 2 delegation token. You can use the delegation token code with your Java action with the <credentials> section in your workflow; see [1]. You'll need the Hive2Credentials, which is not yet included in Apache Oozie, but you can find the code here [2]; you just need to compile that into a jar, put it in Oozie's classpath somewhere, and add it to the oozie-site config. Let me know if you need me to clarify any of that. - Robert [1] http://archive.cloudera.com/cdh5/cdh/5/oozie/DG_UnifiedCredentialsModule.html#Using_the_Unified_Credentials_Module [2] https://github.com/cloudera/oozie/blob/cdh5-4.0.0_5.1.0/core/src/main/java/org/apache/oozie/action/hadoop/Hive2Credentials.java On Wed, Jul 16, 2014 at 4:57 PM, Kristopher Kane <[email protected]> wrote: > When running a class that executes a JDBC connection to Hiveserver2 from an > Oozie Java Action, I get GSS Initiate Failed - > > Failed to find any Kerberos tgt > > The same jar works well from the CLI - the connection string has the > > HS2 principal. > > > > How do I use the delegation token with a JDBC connection to Hiveserver2 > > within an Oozie action? > > > Thanks, > > Kris >
