Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-14383

SparkClientImpl should pass principal and keytab to spark-submit instead of calling kinit explicitely

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.1.0
    • Fix Version/s: 2.1.1, 2.2.0
    • Component/s: Spark
    • Labels:
      None

      Description

      In https://github.com/apache/hive/blob/master/spark-client/src/main/java/org/apache/hive/spark/client/SparkClientImpl.java#L331, kinit is manually called before spark-submit is called. This is problematic if the spark session outlives the delegation token expiry period or the kerberos ticket expiry period. A better way to handle this would be to pass the keytab file location and principal name as parameters to the spark-submit command when kerberos auth is in use.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                ctang.ma Chaoyu Tang
                Reporter:
                mkazia Mubashir Kazia
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: