Hive metadata processor: Reason:Provided Subject must contain a KerberosPrincipal

asked 2019-05-24 00:34:11 -0500

PaulZ
1 ●1 ●1

Hello,

The JDBC connection string which works in beeline does not work in the hive metadata processor.

The error is "HIVE_22 - Cannot make connection with default hive database starting with URL....... Reason: Provided Subject must contain a KerberosPrincipal"

Any clues on what could cause this?

Thank you, Paul

answered 2019-05-24 01:41:50 -0500

rishi
21 ●2

updated 2019-05-24 01:45:53 -0500

metadaddy

3609 ●25 ●37 ●68 https://about.me/patpa...

@PaulZ,

From the error, it looks like the client ( which is sdc in this case), doesn't have a valid identity/ticket, to present to the kerberized hive server.

Could you please check that the following Kerberos properties in the sdc.properties file are properly defined. and can you perform kinit and obtain the valid ticket. i.e

~grep kerberos sdc.properties     
kerberos.client.enabled=true    
kerberos.client.principal=sdc/_HOST@EXAMPLE.COM   
kerberos.client.keytab=sdc.keytab 

# kinit -kt sdc.keytab <principal_name>

See https://streamsets.com/documentation/...