Hi Alan, Maybe you can create a Kerberos ticket in you shell script with a kinit ? (before using HiveCli command)
-- Laurent HATIER - Consultant Business Intelligence chez CapGemini fr.linkedin.com/pub/laurent-hatier/25/36b/a86/ <http://fr.linkedin.com/pub/laurent-h/25/36b/a86/> 2014-08-29 18:37 GMT+02:00 Alan Gardner <[email protected]>: > Hi, > > I'm on CDH5, trying to move an Oozie flow from an unsecured cluster to a > Kerberized one. I've configured the <credentials> section of the flow, and > the hive actions work properly. However, a few stages use shell actions > with the Hive CLI, and these fail even though I've included "SET > mapreduce.job.credentials.binary=$HADOOP_TOKEN_FILE_LOCATION;" as the first > line. Scripts which only hit the metastore work fine (ex. "SHOW TABLES"), > but I can't submit queries that require MR jobs (this on MRv2). > > Any advice? > > P.S. I also have actions which use impala-shell, which doesn't seem to pick > up on the delegation token. But the Hive queries are my primary concern. > > Thanks, > Alan > > -- > > > -- > > > >
