Hello.

I've recently upgraded the cluster to HDP 2.5.3 as well as Ambari to 2.4.2.0 
however I'm now facing problems running Hive queries.

Each query that invokes Tez (i.e. `insert`) results in the following error:

Caused by: org.apache.hadoop.hive.ql.metadata.HiveException: 
org.apache.hadoop.ipc.RemoteException(java.io.IOException): 
java.util.concurrent.ExecutionException: 
org.apache.hadoop.security.authorize.AuthorizationException: User:hdfs not 
allowed to do 'GENERATE_EEK' on 'hive'

Here are my commands:

$ kinit -kt /etc/security/keytabs/automation.keytab
$ beeline -u 
'jdbc:hive2://hiverserver2:10000/default;principal=hive/hiverserver2@ACTIVE.DIRECTORY'
 -f hive_script.hql

This is obviously something that was working before the upgrade.

Why is it running the script as the hdfs user? I have not added the `hdfs` user 
to the 'GENERATE_EEK' property on the Ranger KMS UI as this is not advised (and 
also not permitted).

Are there any settings that need to be adjusted after the upgrade?

Thanks,
Dale

Reply via email to