My Oracle Support Banner

Hive Queries from the HUE UI Fail with "DIGEST-MD5: IO error acquiring password" on Kerberos Enabled BDA 3.0.* Clusters (Doc ID 1910487.1)

Last updated on MARCH 24, 2020

Applies to:

Big Data Appliance Integrated Software - Version 3.0 and later
x86_64

Symptoms

NOTE: In the images, examples and document that follow, user details, cluster names, hostnames, directory paths, filenames, etc. represent a fictitious sample (and are used to provide an illustrative example only). Any similarity to actual persons, or entities, living or dead, is purely coincidental and not intended in any manner.

  

1. Logging into the Hue UI on a Kerberos enabled BDA V3.0.1 and running any query from the Hive editor raises:

Hive Error:
Bad status for request TExecuteStatementReq ...
Unable to instantiate org.apache.hadoop.hive.metastore.HiveMetaStoreClient, sqlState='08s01', InfoMessages=None, statusCode=3), operationHandle=None)

Like:



Note: The Hive Metastore version is correct as verified in MySQL (Node 3 of the cluster) like below.  The correct version is 0.12.0.
$ mysql -uroot -p
mysql> use hive
mysql> select * from VERSION;
+--------+----------------+-----------------------------+
| VER_ID | SCHEMA_VERSION | VERSION_COMMENT  |
+--------+----------------+-----------------------------+
|      1   | 0.12.0                  | Set by MetaStore      |
+--------+----------------+------------------------------+
1 row in set (0.00 sec)

 

2. Checking the current hive log files on Node 4 of the cluster in /var/log/hive: hadoop-cmf-hive-HIVESERVER2-bdanod04.example.com.log.out, reports errors like:

java.lang.RuntimeException: org.apache.thrift.transport.TTransportException: DIGEST-MD5: IO error acquiring password


Additional logging reports:

and


3. Trying to grant a ticket with kinit for various principals does not resolve the issue.

For example, things like the following have no effect. In all cases klist shows the key for the principal is not expired.

a) On Node 3 of the cluster i.e. CM Server.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.