[HIVE-28220] Jdbc connection always fails when retrying in zookeeper service discovery mode with kerberos.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.1.2, 4.0.0
• Component/s: JDBC
• Labels: pull-request-available
• Assignee: Unassigned
• Reporter: Zhen Wang
• Created: 26/Apr/24 06:23
• Updated: 11/May/24 03:32

Description

When jdbc connection is retried, the principal of the next server is ignored, causing kerberos authentication of retried connection to always fail.

 

https://github.com/apache/hive/blob/4614ce72a7f366674d89a3a78f687e419400cb89/jdbc/src/java/org/apache/hive/jdbc/ZooKeeperHiveClientHelper.java#L372

 

error detail:

Exception in thread "main" java.sql.SQLException: Could not open client transport for any of the Server URI's in ZooKeeper: Peer indicated failure: GSS initiate failed
    at org.apache.hive.jdbc.HiveConnection.<init>(HiveConnection.java:256)
    at org.apache.hive.jdbc.HiveDriver.connect(HiveDriver.java:107)
    at java.sql.DriverManager.getConnection(DriverManager.java:664)
    at java.sql.DriverManager.getConnection(DriverManager.java:270)
    at org.example.Test6$.main(Test6.scala:20)
    at org.example.Test6.main(Test6.scala)
Caused by: org.apache.thrift.transport.TTransportException: Peer indicated failure: GSS initiate failed
    at org.apache.thrift.transport.TSaslTransport.receiveSaslMessage(TSaslTransport.java:199)
    at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:277)
    at org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37)
    at org.apache.hadoop.hive.metastore.security.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:51)
    at org.apache.hadoop.hive.metastore.security.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:48)
    at java.security.AccessController.doPrivileged(Native Method)
    at javax.security.auth.Subject.doAs(Subject.java:422)
    at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1628)
    at org.apache.hadoop.hive.metastore.security.TUGIAssumingTransport.open(TUGIAssumingTransport.java:48)
    at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:343)
    at org.apache.hive.jdbc.HiveConnection.<init>(HiveConnection.java:228)
    ... 5 more 

Issue Links

• links to: GitHub Pull Request #5217