Skip to content

Conversation

@yaooqinn
Copy link
Member

@yaooqinn yaooqinn commented Mar 17, 2017

What changes were proposed in this pull request?

Pass the real user ugi instead of proxy ugi for hive metastore client to find right Kerberos tgt

How was this patch tested?

manually

before

17/03/17 16:05:41 INFO hive.metastore: Trying to connect to metastore with URI thrift://xxxxxx:9083
17/03/17 16:05:41 ERROR transport.TSaslTransport: SASL negotiation failure
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]

after

17/03/17 17:27:48 INFO hive.metastore: Trying to connect to metastore with URI thrift://xxxxxxxx:9083
17/03/17 17:27:48 INFO hive.metastore: Connected to metastore.

@AmplabJenkins
Copy link

Can one of the admins verify this patch?

@yaooqinn
Copy link
Member Author

ping @vanzin , can you take a look at this

@vanzin
Copy link
Contributor

vanzin commented Mar 17, 2017

You and @jerryshao need to flip a coin (#17335).

@jerryshao
Copy link
Contributor

What a coincidence 😄 !

@yaooqinn
Copy link
Member Author

@jerryshao 😂

@yaooqinn
Copy link
Member Author

see #17335 for more details, duplicated & closed

@AnhQuanTran
Copy link

@yaooqinn i'm facing the same this problem on spark 3.2.2. Can u tell me how to fix it. Thank you

https://stackoverflow.com/questions/73984517/spark-thrift-3-2-2-impersonate-user-facing-error-with-metastore-authen-sasl-neg

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants