Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-14383

SparkClientImpl should pass principal and keytab to spark-submit instead of calling kinit explicitely

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.1.0
    • 2.1.1, 2.2.0
    • Spark
    • None

    Description

      In https://github.com/apache/hive/blob/master/spark-client/src/main/java/org/apache/hive/spark/client/SparkClientImpl.java#L331, kinit is manually called before spark-submit is called. This is problematic if the spark session outlives the delegation token expiry period or the kerberos ticket expiry period. A better way to handle this would be to pass the keytab file location and principal name as parameters to the spark-submit command when kerberos auth is in use.

      Attachments

        1. HIVE-14383.patch
          2 kB
          Chaoyu Tang

        Issue Links

          blocks

          Bug - A problem which impairs or prevents the functions of the product. HIVE-15485 Investigate the DoAs failure in HoS

          • Major - Major loss of function.
          • Resolved
          is related to

          Sub-task - The sub-task of the issue HIVE-10594 Remote Spark client doesn't use Kerberos keytab to authenticate [Spark Branch]

          • Major - Major loss of function.
          • Closed

          Activity

            People

              ctang Chaoyu Tang
              mkazia Mubashir Kazia
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: