[ https://issues.apache.org/jira/browse/HIVE-17609?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16190068#comment-16190068 ]
Owen O'Malley commented on HIVE-17609: -------------------------------------- +1 You'll need to update the wiki with the documentation for the new tool. > Tool to manipulate delegation tokens > ------------------------------------ > > Key: HIVE-17609 > URL: https://issues.apache.org/jira/browse/HIVE-17609 > Project: Hive > Issue Type: Improvement > Components: Metastore, Security > Affects Versions: 2.2.0, 3.0.0 > Reporter: Mithun Radhakrishnan > Assignee: Mithun Radhakrishnan > Attachments: HIVE-17609.1-branch-2.2.patch, > HIVE-17609.1-branch-2.patch, HIVE-17609.1.patch > > > This was precipitated by OOZIE-2797. We had a case in production where the > number of active metastore delegation tokens outstripped the ZooKeeper > {{jute.maxBuffer}} size. Delegation tokens could neither be fetched, nor be > cancelled. > The root-cause turned out to be a miscommunication, causing delegation tokens > fetched by Oozie *not* to be cancelled automatically from HCat. This was > sorted out as part of OOZIE-2797. > The issue exposed how poor the log-messages were, in the code pertaining to > token fetch/cancellation. We also found need for a tool to query/list/purge > delegation tokens that might have expired already. This patch introduces such > a tool, and improves the log-messages. -- This message was sent by Atlassian JIRA (v6.4.14#64029)