Hi, I'm on CDH5, trying to move an Oozie flow from an unsecured cluster to a Kerberized one. I've configured the <credentials> section of the flow, and the hive actions work properly. However, a few stages use shell actions with the Hive CLI, and these fail even though I've included "SET mapreduce.job.credentials.binary=$HADOOP_TOKEN_FILE_LOCATION;" as the first line. Scripts which only hit the metastore work fine (ex. "SHOW TABLES"), but I can't submit queries that require MR jobs (this on MRv2).
Any advice? P.S. I also have actions which use impala-shell, which doesn't seem to pick up on the delegation token. But the Hive queries are my primary concern. Thanks, Alan -- --
