Hive connection fails once impersonation is turned on

Description

Kylo Hive connection fail if Hive impersonation is turned on.

org.springframework.dao.DataAccessResourceFailureException: StatementCallback; SQL [set hive.optimize.index.filter=false]; org.apache.thrift.transport.TTransportException: org.apache.http.client.ClientProtocolException; nested exception is java.sql.SQLException: org.apache.thrift.transport.TTransportException: org.apache.http.client.ClientProtocolException
at org.springframework.jdbc.support.SQLStateSQLExceptionTranslator.doTranslate(SQLStateSQLExceptionTranslator.java:105)
(...a number of lines omitted for the sake of readability – check attachment for the full log...)
Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)
at sun.security.jgss.krb5.Krb5InitCredential.getInstance(Krb5InitCredential.java:147)
at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:122)
at sun.security.jgss.krb5.Krb5MechFactory.getMechanismContext(Krb5MechFactory.java:187)
at sun.security.jgss.GSSManagerImpl.getMechanismContext(GSSManagerImpl.java:224)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:212)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at org.apache.hive.service.auth.HttpAuthUtils$HttpKerberosClientAction.run(HttpAuthUtils.java:111)
at org.apache.hive.service.auth.HttpAuthUtils$HttpKerberosClientAction.run(HttpAuthUtils.java:79)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:422)
at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1656)
... 135 more

Environment

Kylo 0.8.1
Hive on MS Azure / Hive 1.2.1000.2.6.1.3-4

Activity

Show:
Greg Hart
August 31, 2017, 11:24 PM

Kylo currently only supports binary transport mode for HiveServer2. This should be fixed in the next release, Kylo 0.8.4.

Greg Hart
September 1, 2017, 1:12 AM
Done

Assignee

Greg Hart

Reporter

Peter Horvath

Labels

None

Reviewer

None

Story point estimate

None

Components

Sprint

None

Fix versions

Affects versions

Priority

Medium