[AMBARI-22601] Hive.llap.task.keytab.file is not generated after upgrade to Ambari 2.6.0 when keytabs are regenerated using “only missing hosts and components” option

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.6.0
• Component/s: ambari-server, security
• Assignee: Unassigned
• Reporter: Brian Goerlitz
• Created: 05/Dec/17 22:04
• Updated: 05/Dec/17 22:04

Description

When keytabs are regenerated for missing hosts and components after upgrading to Ambari 2.6.0, new properties hive.llap.task.keytab.file and hive.llap.task.principal are added to hive-interactive-site (AMBARI-21641), but keytab corresponding to hive.llap.task.keytab.file is not generated. Due to this, HiveServer2 Interactive fails to restart with error

WARN  [main ()] org.apache.hadoop.hive.llap.daemon.impl.LlapDaemon: Failed to start LLAP Daemon with exception
java.lang.RuntimeException: java.io.IOException: Login failure for hive/[e-mail] from keytab /etc/security/keytabs/hive.llap.task.keytab: javax.security.auth.login.LoginException: Unable to obtain password from user