Hi Rohini,
Looks like Credentials module was available in lastest versions of oozie.
We earlier had 2.x version of oozie which was throwing schema errors with
credentials.
We upgraded to oozie 3.1.3 and tried out this.
However, still its not able to get the delegation token and throws GSS
exception in server side of hcatalog.
Caused by: org.apache.thrift.transport.TTransportException: Peer indicated
failure: GSS initiate failed
at
org.apache.thrift.transport.TSaslTransport.receiveSaslMessage(TSaslTransport.java:190)
at
org.apache.thrift.transport.TSaslServerTransport.handleSaslStartMessage(TSaslServerTransport.java:124)
at
org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:253)
at
org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:40)
at
org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:215)
... 10 more
Could it be due to the following
https://issues.apache.org/jira/browse/OOZIE-889 JIRA?
Thanks again for being very helpful.
~Rajesh.B
On Sat, Jul 7, 2012 at 12:25 PM, Rajesh Balamohan <
[email protected]> wrote:
> Thanks a bunch Rohini. I didnt add this earlier. Will try this.
>
> ~Rajesh.B
>
>
> On Sat, Jul 7, 2012 at 12:19 PM, Rohini Palaniswamy <
> [email protected]> wrote:
>
>> You need to add hcat credentials(delegation token) to your pig action.
>> Oozie will get the delegation token from hcat and add it to the
>> credentials
>> of the Job it launches.
>>
>> Example:
>> <credentials>
>> <credential name="hcat_auth" type="hcat">
>> <property>
>> <name>hcat.metastore.uri</name>
>> <value>thrift://<hcathost>:<hcatport></value>
>> </property>
>> <property>
>> <name>hcat.metastore.principal</name>
>> <value>hcat/<hcathost>@KDCREALM</value>
>> </property>
>> </credential>
>> </credentials>
>> <action name="somejob" cred="hcat_auth">
>> ....
>>
>> Regards,
>> Rohini
>>
>>
>> On Fri, Jul 6, 2012 at 3:58 AM, Rajesh Balamohan <
>> [email protected]
>> > wrote:
>>
>> > Hi All,
>> >
>> > I have security enabled (kerberos) hadoop cluster 0.20.205x with Pig
>> 0.9.3
>> > and Hcatalog 0.4.1
>> >
>> > When I try to run HCatalog with PIG in standalone grunt, it works great.
>> >
>> > However, when I embed the same PIG script in oozie, it throws GSS
>> transport
>> > exception like the one mentioned in HCATALOG-366.
>> >
>> > Does HCatalog 0.4.1 work with oozie in secured mode?
>> >
>> > Any pointers would be great help.
>> >
>> > --
>> > ~Rajesh.B
>> >
>>
>
>
>
> --
> ~Rajesh.B
>
--
~Rajesh.B
