Hi Margus Can you check the following properties are present in custom webhcat-site section of hive services in Ambari.
webhcat.proxyuser.<ambari server principal>.groups=* webhcat.proxyuser.<ambari server principal>.hosts=* http://docs.hortonworks.com/HDPDocuments/Ambari-2.2.0.0/bk_ambari_views_guide/content/_setup_WebHCat_proxy_user_pig_view.html Thanks Gaurav On 2/22/16, 7:19 PM, "Margus Roo" <[email protected]> wrote: >Hi > >I set up Pig view as >https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_ambari_views_guide/content/section_pig_view_kerberos_config.html > >In ambari-server.log I get: > >22 Feb 2016 15:26:08,889 INFO [qtp-client-24] JSONRequest:261 - curl -d >statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d >doAs="margusja" -d >file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d >user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"; >22 Feb 2016 15:26:08,911 ERROR [qtp-client-24] >ServiceFormattedException:92 - java.lang.NullPointerException >22 Feb 2016 15:26:08,911 ERROR [qtp-client-24] >ServiceFormattedException:95 - java.lang.RuntimeException: >java.lang.NullPointerException > >java.lang.RuntimeException: java.lang.NullPointerException > at >sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1454) > at >sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440) > at >sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:2978) > at >java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489) > at >org.apache.ambari.server.controller.internal.URLStreamProvider.processURL(URLStreamProvider.java:209) > at >org.apache.ambari.server.view.ViewURLStreamProvider.getHttpURLConnection(ViewURLStreamProvider.java:239) > at >org.apache.ambari.server.view.ViewURLStreamProvider.getInputStream(ViewURLStreamProvider.java:216) > at >org.apache.ambari.server.view.ViewURLStreamProvider.readFrom(ViewURLStreamProvider.java:103) > at >org.apache.ambari.server.view.ViewURLStreamProvider.readAs(ViewURLStreamProvider.java:117) > at >org.apache.ambari.view.pig.templeton.client.JSONRequest.readFrom(JSONRequest.java:273) > at >org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:117) > at >org.apache.ambari.view.pig.templeton.client.JSONRequest.post(JSONRequest.java:128) > at >org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:96) > at >org.apache.ambari.view.pig.templeton.client.TempletonApi.runPigQuery(TempletonApi.java:103) > at >org.apache.ambari.view.pig.resources.jobs.JobResourceManager.submitJob(JobResourceManager.java:222) > at >org.apache.ambari.view.pig.resources.jobs.JobResourceManager.create(JobResourceManager.java:87) > at >org.apache.ambari.view.pig.resources.jobs.JobService.runJob(JobService.java:254) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at >sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > at >sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:497) > at >com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60) > at >com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:205) > at >com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75) > at >com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302) > at >com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137) > at >com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) > at >com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137) > at >com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) > at >com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137) > at >com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) > at >com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108) > at >com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) > at >com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84) > at >com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1542) > at >com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1473) > at >com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1419) > at >com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1409) > at >com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:409) > at >com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:540) > at >com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:715) > at javax.servlet.http.HttpServlet.service(HttpServlet.java:848) > at >org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:684) > at >org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1496) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:330) > at >org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:118) > at >org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:84) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:103) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:45) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.apache.ambari.server.security.authorization.AmbariAuthorizationFilter.doFilter(AmbariAuthorizationFilter.java:182) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:150) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87) > at >org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342) > at >org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192) > at >org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160) > at >org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237) > at >org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167) > at >org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467) > at >org.apache.ambari.server.api.MethodOverrideFilter.doFilter(MethodOverrideFilter.java:72) > at >org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467) > at >org.apache.ambari.server.api.AmbariPersistFilter.doFilter(AmbariPersistFilter.java:47) > at >org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467) > at >org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:82) > at >org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:294) > at >org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467) > at >org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:501) > at >org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) > at >org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557) > at >org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) > at >org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086) > at >org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:429) > at >org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) > at >org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020) > at >org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) > at >org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:209) > at >org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:198) > at >org.apache.ambari.server.controller.AmbariHandlerList.handle(AmbariHandlerList.java:132) > at >org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) > at org.eclipse.jetty.server.Server.handle(Server.java:370) > at >org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:494) > at >org.eclipse.jetty.server.AbstractHttpConnection.content(AbstractHttpConnection.java:982) > at >org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.content(AbstractHttpConnection.java:1043) > at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:865) > at >org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:240) > at >org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82) > at >org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:696) > at >org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:53) > at >org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608) > at >org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543) > at java.lang.Thread.run(Thread.java:745) >Caused by: java.lang.NullPointerException > at java.util.Base64$Encoder.encode(Base64.java:261) > at java.util.Base64$Encoder.encodeToString(Base64.java:315) > at >sun.net.www.protocol.http.NegotiateAuthentication.setHeaders(NegotiateAuthentication.java:182) > at >sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1694) > at >sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440) > at >java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480) > ... 97 more > > >If I do from command line: >[margusja@hadoopmgmt ~]$ curl -d >statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d >doAs="margusja" -d >file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d >user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"; ><html> ><head> ><meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/> ><title>Error 401 Authentication required</title> ></head> ><body> ><h2>HTTP ERROR: 401</h2> ><p>Problem accessing /templeton/v1/pig. Reason: ><pre> Authentication required</pre></p> ><hr /><i><small>Powered by Jetty://</small></i> > > > > > > > > > > > > > > > > > > > > ></body> ></html> >[margusja@hadoopmgmt ~]$ > >But if I add --negotiate -u : >[margusja@hadoopmgmt ~]$ kinit >Password for [email protected]: >[margusja@hadoopmgmt ~]$ curl --negotiate -u : -d >statusdir="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08" -d >doAs="margusja" -d >file="/user/margusja/pig/jobs/kalamaja112_22-02-2016-15-26-08/script.pig" -d >user.name="margusja" "http://hadoopnn1.estpak.ee:50111/templeton/v1/pig"; >{"id":"job_1456134316547_0161"}[margusja@hadoopmgmt ~]$ > >WebHDFS Authentication: auth=KERBEROS;proxyuser=ambari-server (it works >in hive and hdfs views) > > >Any hints? > >-- >Margus (margusja) Roo >http://margus.roo.ee >skype: margusja >+372 51 48 780 > >
