当试图通过webhcat查询配置单元时,超级用户:hcat的未授权连接

nue99wik  于 2021-06-02  发布在  Hadoop
关注(0)|答案(2)|浏览(367)

我正在尝试使用webhcat/templeton执行配置单元查询。我将查询发布到/templeton/v1/hive,并将“execute”参数设置为与我的查询相等(现在是一个简单的“select count(*)”查询)。
但是当我这么做的时候,我总是会发现这个错误:

{"error":"Unauthorized connection for super-user: hcat from IP 172.31.27.207"}

据我目前所知,这些“针对超级用户的未授权连接”错误通常与proxyuser设置有关,因此我在core-site.xml中添加了以下内容:

<property> 
   <name>hadoop.proxyuser.hcat.hosts</name> 
   <value>*</value> 
 </property> 

 <property> 
   <name>hadoop.proxyuser.hcat.groups</name> 
   <value>*</value> 
 </property>

不幸的是,这似乎毫无帮助。在添加这个并重新启动服务之后,我仍然得到相同的错误。
我还确认了这里引用的所有设置-https://cwiki.apache.org/confluence/display/hive/webhcat+installwebhcat
设置为“启用代理用户”部分下列出的值。
这是我尝试查询时在webhcat日志中看到的:

WARN  | 17 Mar 2016 19:07:04,977 | org.apache.hive.hcatalog.templeton.Main | user.name is sent as form parameter which is deprecated as of Hive 0.13.  Should send it in the query string.
WARN  | 17 Mar 2016 19:07:04,977 | org.apache.hive.hcatalog.templeton.Main | user.name is sent as form parameter which is deprecated as of Hive 0.13.  Should send it in the query string.
WARN  | 17 Mar 2016 19:07:04,977 | org.apache.hive.hcatalog.templeton.Main | user.name is sent as form parameter which is deprecated as of Hive 0.13.  Should send it in the query string.
INFO  | 17 Mar 2016 19:07:05,064 | org.apache.hadoop.yarn.client.api.impl.TimelineClientImpl | Timeline service address: http://ip-172-31-27-207.ec2.internal:8188/ws/v1/timeline/
INFO  | 17 Mar 2016 19:07:05,064 | org.apache.hadoop.yarn.client.RMProxy | Connecting to ResourceManager at ip-172-31-27-207.ec2.internal/172.31.27.207:8050
INFO  | 17 Mar 2016 19:07:05,229 | org.apache.hadoop.yarn.client.api.impl.TimelineClientImpl | Timeline service address: http://ip-172-31-27-207.ec2.internal:8188/ws/v1/timeline/
INFO  | 17 Mar 2016 19:07:05,229 | org.apache.hadoop.yarn.client.RMProxy | Connecting to ResourceManager at ip-172-31-27-207.ec2.internal/172.31.27.207:8050
INFO  | 17 Mar 2016 19:07:05,305 | org.apache.hadoop.yarn.client.api.impl.TimelineClientImpl | Timeline service address: http://ip-172-31-27-207.ec2.internal:8188/ws/v1/timeline/
INFO  | 17 Mar 2016 19:07:05,305 | org.apache.hadoop.yarn.client.RMProxy | Connecting to ResourceManager at ip-172-31-27-207.ec2.internal/172.31.27.207:8050
ERROR | 17 Mar 2016 19:07:05,315 | org.apache.hive.hcatalog.templeton.CatchallExceptionMapper | Unauthorized connection for super-user: hcat from IP 172.31.27.207

有没有其他的IDE可以导致这种情况,以及如何解决?

xtupzzrd

xtupzzrd1#

我也有同样的问题,但下一个向导解决了我:http://docs.hortonworks.com/hdpdocuments/ambari-2.2.0.0/bk_ambari_views_guide/content/_setup_hdfs_proxy_user.html
必须添加用于访问ambari用户界面的用户,而不是引发错误的用户。例如,在我的例子中,错误是下一个: Unauthorized connection for super-user: root from IP 172.16.8.172 但我要添加的用户是 hadoop.proxyuser.admin.hosts .

pgx2nnw8

pgx2nnw82#

好了,问题解决了。事情是这样的。我在ambari工作来更改配置,这些设置在“hdfs”部分下。做出更改后,ambari会提示您重新启动受影响的服务,因此我选择这样做。不幸的是,事实证明,这只是重新启动hdfs!所以resourcemanager组件,它是yarn的一部分(用ambari的术语来说)没有被重新启动。重新启动Yarn服务后,现在可以正常工作了。

相关问题