Kylo Hive connection fail if Hive impersonation is turned on.
org.springframework.dao.DataAccessResourceFailureException: StatementCallback; SQL [set hive.optimize.index.filter=false]; org.apache.thrift.transport.TTransportException: org.apache.http.client.ClientProtocolException; nested exception is java.sql.SQLException: org.apache.thrift.transport.TTransportException: org.apache.http.client.ClientProtocolException
at org.springframework.jdbc.support.SQLStateSQLExceptionTranslator.doTranslate(SQLStateSQLExceptionTranslator.java:105)
(...a number of lines omitted for the sake of readability – check attachment for the full log...)
Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)
at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147)
at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122)
at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187)
at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at org.apache.hive.service.auth.HttpAuthUtils$HttpKerberosClientAction.run(HttpAuthUtils.java:111)
at org.apache.hive.service.auth.HttpAuthUtils$HttpKerberosClientAction.run(HttpAuthUtils.java:79)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:422)
at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1656)
... 135 more
Kylo 0.8.1
Hive on MS Azure / Hive 1.2.1000.2.6.1.3-4
Kylo currently only supports binary transport mode for HiveServer2. This should be fixed in the next release, Kylo 0.8.4.
Patch for Kylo 0.8.1 to support Kerberos over HTTP for Hive queries:
https://s3-us-west-2.amazonaws.com/thinkbig.kylo/KYLO-1048/kylo-kerberos-core-0.8.1.jar
https://s3-us-west-2.amazonaws.com/thinkbig.kylo/KYLO-1048/kylo-thrift-proxy-core-0.8.1.jar