sqoop接入kerberos安全认证后，本地运行正常，但提交到yarn上连接hive报错： Unable to obtain password from user

原创

于 2018-09-17 15:41:50 发布 · 1.4w 阅读

CC 4.0 BY-SA版权

博客讲述了在sqoop接入kerberos安全认证后，当从本地运行转为提交到yarn上时遇到无法从用户获取密码的错误。问题根源在于sqoop.keytab文件的权限设置不正确。通过修改sqoop.keytab的权限为a+r，解决了这个问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

日志信息：
2018-09-17 11:31:30,774 INFO [OutputFormatLoader-consumer] com.chinacreator.sqoop.connector.hive.HiveExecutor: 连接hive失败java.io.IOException: Login failure for sqoop/139.bd@EXAMPLE.COM from keytab /usr/local/src/sqoop-1.99.7-bin-hadoop200/keytabs/sqoop.keytab: javax.security.auth.login.LoginException: Unable to obtain password from user

java.io.IOException: Login failure for sqoop/139.bd@EXAMPLE.COM from keytab /usr/local/src/sqoop-1.99.7-bin-hadoop200/keytabs/sqoop.keytab: javax.security.auth.login.LoginException: Unable to obtain password from user

	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1351)
	at com.chinacreator.sqoop.connector.hive.HiveExecutor.validate(HiveExecutor.java:111)
	at com.chinacreator.sqoop.connector.hive.HiveExecutor.<init>(HiveExecutor.java:56)
	at com.chinacreator.sqoop.connector.hive.HiveLoader.load(HiveLoader.java:57)
	at com.chinacreator.sqoop.c