Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-25376

Hive critical alerts when LDAP auth is enabled

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 2.7.4
    • None
    • ambari-sever
    • None

    Description

      Steps to reproduce

      --------------------------

      1. Enable Hive LDAP authentication.
      2. Add below configs to hive-env alert_ldap_username, alert_ldap_password
      3. wait for alerts HiveServer2 Interactive Process , HiveServer2 Process, It fails with below exception.
      4. Connection failed on host c157-node4.squadron-labs.com:10500 (Traceback (most recent call last):
          File "/var/lib/ambari-agent/cache/stacks/HDP/3.0/services/HIVE/package/alerts/alert_hive_interactive_thrift_port.py", line 210, in execute
            ldap_password=ldap_password)
          File "/usr/lib/ambari-agent/lib/resource_management/libraries/functions/hive_check.py", line 86, in check_thrift_port_sasl
            timeout_kill_strategy=TerminateStrategy.KILL_PROCESS_TREE,
          File "/usr/lib/ambari-agent/lib/resource_management/core/base.py", line 166, in __init__
            self.env.run()
          File "/usr/lib/ambari-agent/lib/resource_management/core/environment.py", line 160, in run
            self.run_action(resource, action)
          File "/usr/lib/ambari-agent/lib/resource_management/core/environment.py", line 124, in run_action
            provider_action()
          File "/usr/lib/ambari-agent/lib/resource_management/core/providers/system.py", line 263, in action_run
            returns=self.resource.returns)
          File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 72, in inner
            result = function(command, **kwargs)
          File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 102, in checked_call
            tries=tries, try_sleep=try_sleep, timeout_kill_strategy=timeout_kill_strategy, returns=returns)
          File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 150, in _call_wrapper
            result = _call(command, **kwargs_copy)
          File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 314, in _call
            raise ExecutionFailed(err_msg, code, out, err)
        ExecutionFailed: Execution of 'beeline -n hive -u 'jdbc:hive2://c157-node4.squadron-labs.com:10500/;transportMode=binary' -n 'test1' -p '[PROTECTED]' -e ';' 2>&1 | awk '{print}' | grep -i -e 'Connected to:' -e 'Transaction isolation:'' returned 1. 
        )
        

      Root cause:

      Ambari uses both the users in beeline. you can see hive as well as ldap user. ideally it should only use LDAP user.

      Attachments

        1. AMBARI-25376.patch
          1 kB
          amarnath reddy pappu

        Activity

          People

            apappu@hortonworks.com amarnath reddy pappu
            apappu@hortonworks.com amarnath reddy pappu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: