kyuubi icon indicating copy to clipboard operation
kyuubi copied to clipboard

[Bug] Jdbc connection always fails when retrying in zookeeper service discovery mode with kerberos.

Open wForget opened this issue 1 year ago • 1 comments

Code of Conduct

Search before asking

  • [X] I have searched in the issues and found no similar issues.

Describe the bug

When jdbc connection is retried, the principal of the next server is ignored, causing kerberos authentication of retried connection to always fail.

https://github.com/apache/kyuubi/blob/5cbbdc32dbc74b7ab2a1cd6d71a7d0af07945494/kyuubi-hive-jdbc/src/main/java/org/apache/kyuubi/jdbc/hive/ZooKeeperHiveClientHelper.java#L212

I also reported this issue in hive: https://issues.apache.org/jira/browse/HIVE-28220

Affects Version(s)

master

Kyuubi Server Log Output

No response

Kyuubi Engine Log Output

No response

Kyuubi Server Configurations

No response

Kyuubi Engine Configurations

No response

Additional context

No response

Are you willing to submit PR?

  • [X] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to fix.
  • [ ] No. I cannot submit a PR at this time.

wForget avatar Apr 26 '24 06:04 wForget

I first try to push to upstream hive repo: https://github.com/apache/hive/pull/5217

wForget avatar Apr 26 '24 06:04 wForget

This issue can be avoided by using server principal with _HOST instead of actual hostname.

wForget avatar May 11 '24 03:05 wForget