[
https://issues.apache.org/jira/browse/AMBARI-25376?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
amarnath reddy pappu updated AMBARI-25376:
------------------------------------------
Summary: Hive critical alerts when LDAP auth is enabled (was: Hive service
check fails when LDAP auth is enabled)
> Hive critical alerts when LDAP auth is enabled
> ----------------------------------------------
>
> Key: AMBARI-25376
> URL: https://issues.apache.org/jira/browse/AMBARI-25376
> Project: Ambari
> Issue Type: Bug
> Components: ambari-sever
> Affects Versions: 2.7.4
> Reporter: amarnath reddy pappu
> Assignee: amarnath reddy pappu
> Priority: Major
> Attachments: AMBARI-25376.patch
>
>
> Steps to reproduce
> --------------------------
> # Enable Hive LDAP authentication.
> # Add below configs to hive-env alert_ldap_username, alert_ldap_password
> # wait for alerts HiveServer2 Interactive Process , HiveServer2 Process, It
> fails with below exception.
> #
> {noformat}
> Connection failed on host c157-node4.squadron-labs.com:10500 (Traceback (most
> recent call last):
> File
> "/var/lib/ambari-agent/cache/stacks/HDP/3.0/services/HIVE/package/alerts/alert_hive_interactive_thrift_port.py",
> line 210, in execute
> ldap_password=ldap_password)
> File
> "/usr/lib/ambari-agent/lib/resource_management/libraries/functions/hive_check.py",
> line 86, in check_thrift_port_sasl
> timeout_kill_strategy=TerminateStrategy.KILL_PROCESS_TREE,
> File "/usr/lib/ambari-agent/lib/resource_management/core/base.py", line
> 166, in __init__
> self.env.run()
> File "/usr/lib/ambari-agent/lib/resource_management/core/environment.py",
> line 160, in run
> self.run_action(resource, action)
> File "/usr/lib/ambari-agent/lib/resource_management/core/environment.py",
> line 124, in run_action
> provider_action()
> File
> "/usr/lib/ambari-agent/lib/resource_management/core/providers/system.py",
> line 263, in action_run
> returns=self.resource.returns)
> File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line
> 72, in inner
> result = function(command, **kwargs)
> File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line
> 102, in checked_call
> tries=tries, try_sleep=try_sleep,
> timeout_kill_strategy=timeout_kill_strategy, returns=returns)
> File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line
> 150, in _call_wrapper
> result = _call(command, **kwargs_copy)
> File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line
> 314, in _call
> raise ExecutionFailed(err_msg, code, out, err)
> ExecutionFailed: Execution of 'beeline -n hive -u
> 'jdbc:hive2://c157-node4.squadron-labs.com:10500/;transportMode=binary' -n
> 'test1' -p '[PROTECTED]' -e ';' 2>&1 | awk '{print}' | grep -i -e 'Connected
> to:' -e 'Transaction isolation:'' returned 1.
> )
> {noformat}
> *Root cause:*
> Ambari uses both the users in beeline. you can see hive as well as ldap user.
> ideally it should only use LDAP user.
--
This message was sent by Atlassian Jira
(v8.3.2#803003)
