[AMBARI-20947] Use keytab file named 'hive.service.keytab' instead of 'hive.llap.zk.sm.keytab' in hive_server_interactive.py for copying to slider.

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: trunk, 2.5.0
• Fix Version/s: trunk, 2.5.1
• Component/s: ambari-server
• Assignee: Swapan Shridhar
• Reporter: Swapan Shridhar
• Created: 05/May/17 22:22
• Updated: 11/May/17 01:21
• Resolved: 11/May/17 00:05

Description

Issue:
HSI server start failed with "kinit: Key table file '/etc/security/keytabs/hive.llap.zk.sm.keytab' not found while getting initial credentials".

Reason:
This can happen when HSI is placed on a node where YARN's NodeManager node doesn't exists. Thus, 'hive.llap.zk.sm.keytab' file wont get generated.

Fix:

Following are the principals in both keytab files:

[root@ctr-e133-1493418528701-3077-01-000003 keytabs]# klist -kt hive.service.keytab
Keytab name: FILE:hive.service.keytab
KVNO Timestamp         Principal
---- ----------------- --------------------------------------------------------
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
[root@ctr-e133-1493418528701-3077-01-000003 keytabs]# 




[root@ctr-e133-1493418528701-3077-01-000003 keytabs]# klist -kt hive.llap.zk.sm.keytab 
Keytab name: FILE:hive.llap.zk.sm.keytab
KVNO Timestamp         Principal
---- ----------------- --------------------------------------------------------
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
   2 05/03/17 20:57:16 hive/[e-mail]
[root@ctr-e133-1493418528701-3077-01-000003 keytabs]# 

Given that 'hive.service.keytab' and 'hive.llap.zk.sm.keytab' contains the same principals, we can use 'hive.service.keytab' for copying principals to slider in HDFS.