getting proxy privilege issue while querying Hive from Kylo

363 views
Skip to first unread message

Venkatesh Madala

unread,
Oct 24, 2017, 9:35:28 AM10/24/17
to Kylo Community

I am getting below issue when try to access tables feature in Kylo. using beeline I am able to access Hive and able to query tables. 

Hadoop cluster is kerberised. we are using keytab and principle properly. please help me on this if anybody faced similar issue. From the documentation we have added below configuration in core-site.xml 


<property>
  <name>hadoop.proxyuser.kylo.groups</name>
  <value>*</value>
</property>
<property>
  <name>hadoop.proxyuser.kylo.hosts</name>
  <value>*</value>
</property>


org.apache.thrift.protocol.TProtocolException: Required field 'serverProtocolVersion' is unset! Struct:TOpenSessionResp(status:TStatus(statusCode:ERROR_STATUS, infoMessages:[*org.apache.hive.service.cli.HiveSQLException:Failed to validate proxy privilege of hive for user:14:13, org.apache.hive.service.auth.HiveAuthFactory:verifyProxyAccess:HiveAuthFactory.java:394, org.apache.hive.service.cli.thrift.ThriftCLIService:getProxyUser:ThriftCLIService.java:768, org.apache.hive.service.cli.thrift.ThriftCLIService:getUserName:ThriftCLIService.java:389, org.apache.hive.service.cli.thrift.ThriftCLIService:getSessionHandle:ThriftCLIService.java:416, org.apache.hive.service.cli.thrift.ThriftCLIService:OpenSession:ThriftCLIService.java:319, org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession:getResult:TCLIService.java:1257, org.apache.hive.service.cli.thrift.TCLIService$Processor$OpenSession:getResult:TCLIService.java:1242, org.apache.thrift.ProcessFunction:process:ProcessFunction.java:39, org.apache.thrift.TBaseProcessor:process:TBaseProcessor.java:39, org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssumingProcessor:process:HadoopThriftAuthBridge.java:562, org.apache.thrift.server.TThreadPoolServer$WorkerProcess:run:TThreadPoolServer.java:286, java.util.concurrent.ThreadPoolExecutor:runWorker:ThreadPoolExecutor.java:1142, java.util.concurrent.ThreadPoolExecutor$Worker:run:ThreadPoolExecutor.java:617, java.lang.Thread:run:Thread.java:745, *org.apache.hadoop.security.authorize.AuthorizationException:Unauthorized connection for super-user: hive from IP :0:-1], sqlState:08S01, errorCode:0, errorMessage:Failed to validate proxy privilege of hive for user), serverProtocolVersion:null)

Gregory Hart

unread,
Oct 24, 2017, 4:24:41 PM10/24/17
to Kylo Community
Hi Venkatesh,

Could you verify that you have the following property set correctly in kylo-services/conf/application.properties?
hive.datasource.username=kylo


Reply all
Reply to author
Forward
0 new messages