我正在使用Kerberos中添加的帐户直接测试Sentry:
beeline -u "jdbc:hive2://IP:10000/;principal=test_table/domain_name@HADOOP.COM"
但
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512M; support was removed in 8.0
scan complete in 3ms
Connecting to jdbc:hive2://IP:10000/;principal=test_table/domain_name@HADOOP.COM
Error: Could not open client transport with JDBC Uri: jdbc:hive2://IP:10000/;principal=test_table/domain_name@HADOOP.COM: Peer indicated failure: GSS initiate failed (state=08S01,code=0)
Beeline version 1.1.0-cdh5.5.0 by Apache Hive
但是,如果我与帐户配置单元连接,它可以正常工作!
beeline -u "jdbc:hive2://IP:10000/;principal=hive/domain_name@HADOOP.COM"
为什么会发生这种情况?顺便说一句,我使用kinit
到我客户端的帐户。
答案 0 :(得分:1)
对于beeline,'!connect'中的主要参数必须是hive @ domainname,但你是谁以及你在hive中可以做什么是由kerberos'tgt控制的,由kinit指定。