14/04/03 21:50:28 DEBUG security.UserGroupInformation: PrivilegedAction as:hive/myhostname@EXAMPLE.COM (auth:KERBEROS) from:org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge20S.java:669) 14/04/03 21:50:28 DEBUG transport.TSaslServerTransport: transport map does not contain key 14/04/03 21:50:28 DEBUG transport.TSaslTransport: opening transport org.apache.thrift.transport.TSaslServerTransport@26e795b 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Received message with status START and payload length 6 14/04/03 21:50:28 DEBUG transport.TSaslServerTransport: Received start message with status START 14/04/03 21:50:28 DEBUG transport.TSaslServerTransport: Received mechanism name 'GSSAPI' 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Start message handled 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Received message with status OK and payload length 581 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Writing message with status OK and payload length 98 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Received message with status OK and payload length 0 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Writing message with status OK and payload length 53 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Received message with status COMPLETE and payload length 53 14/04/03 21:50:28 DEBUG security.SaslRpcServer: SASL server GSSAPI callback: setting canonicalized client ID: user@EXAMPLE.COM 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Writing message with status COMPLETE and payload length 0 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: Main negotiation loop complete 14/04/03 21:50:28 DEBUG security.UserGroupInformation: PrivilegedAction as:hive/myhostname@EXAMPLE.COM (auth:KERBEROS) from:org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge20S.java:669) 14/04/03 21:50:28 DEBUG transport.TSaslServerTransport: transport map does contain key org.apache.thrift.transport.TSocket@2d4c8822 14/04/03 21:50:28 DEBUG thrift.HadoopThriftAuthBridge: AUTH ID ======>user@EXAMPLE.COM 14/04/03 21:50:28 DEBUG transport.TSaslTransport: SERVER: reading data length: 80 14/04/03 21:50:28 INFO thrift.ThriftCLIService: Client protocol version: HIVE_CLI_SERVICE_PROTOCOL_V6 14/04/03 21:50:28 DEBUG thrift.ThriftCLIService: Proxy user from query string: null 14/04/03 21:50:28 DEBUG thrift.ThriftCLIService: Proxy user from thrift body: hrt_1 14/04/03 21:50:28 INFO auth.HiveAuthFactory: HiveAuthFactory.getShortPrincipalName(): principalName: user@EXAMPLE.COM , shortName: hrt_qa 14/04/03 21:50:28 DEBUG security.Groups: Returning fetched groups for 'hrt_1' 14/04/03 21:50:28 WARN thrift.ThriftCLIService: Error opening session: org.apache.hive.service.cli.HiveSQLException: Failed to validate proxy privilage of user@EXAMPLE.COM for hrt_1 at org.apache.hive.service.auth.HiveAuthFactory.verifyProxyAccess(HiveAuthFactory.java:310) at org.apache.hive.service.cli.thrift.ThriftCLIService.getProxyUser(ThriftCLIService.java:570) at org.apache.hive.service.cli.thrift.ThriftCLIService.getUserName(ThriftCLIService.java:231) at org.apache.hive.service.cli.thrift.ThriftCLIService.getSessionHandle(ThriftCLIService.java:245) at org.apache.hive.service.cli.thrift.ThriftCLIService.OpenSession(ThriftCLIService.java:193) at org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession.getResult(TCLIService.java:1253) at org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession.getResult(TCLIService.java:1238) at org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39) at org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39) at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingProcessor.process(HadoopThriftAuthBridge20S.java:625) at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:206) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908) at java.lang.Thread.run(Thread.java:662) Caused by: org.apache.hadoop.security.authorize.AuthorizationException: Unauthorized connection for super-user: user from IP /XXX.XXX.XXX.XXX at org.apache.hadoop.security.authorize.ProxyUsers.authorize(ProxyUsers.java:167) at org.apache.hadoop.hive.shims.HadoopShimsSecure.authorizeProxyAccess(HadoopShimsSecure.java:532) at org.apache.hive.service.auth.HiveAuthFactory.verifyProxyAccess(HiveAuthFactory.java:306) ... 13 more