Return-Path: X-Original-To: apmail-hadoop-user-archive@minotaur.apache.org Delivered-To: apmail-hadoop-user-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id ACCC51852D for ; Mon, 2 Nov 2015 14:14:17 +0000 (UTC) Received: (qmail 36911 invoked by uid 500); 2 Nov 2015 14:14:10 -0000 Delivered-To: apmail-hadoop-user-archive@hadoop.apache.org Received: (qmail 36781 invoked by uid 500); 2 Nov 2015 14:14:10 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hadoop.apache.org Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 36771 invoked by uid 99); 2 Nov 2015 14:14:10 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 02 Nov 2015 14:14:10 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id B43D4180251 for ; Mon, 2 Nov 2015 14:14:09 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.981 X-Spam-Level: *** X-Spam-Status: No, score=3.981 tagged_above=-999 required=6.31 tests=[HTML_MESSAGE=3, KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, URIBL_BLOCKED=0.001] autolearn=disabled Received: from mx1-us-east.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id sncoO4cNR6vu for ; Mon, 2 Nov 2015 14:13:59 +0000 (UTC) Received: from rpc7292.td.teradata.com (nat13.teradata.com [153.65.16.13]) by mx1-us-east.apache.org (ASF Mail Server at mx1-us-east.apache.org) with ESMTPS id 47C7042AB6 for ; Mon, 2 Nov 2015 14:13:59 +0000 (UTC) Received: from rpc7292.td.teradata.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 5EA7F2580AB for ; Mon, 2 Nov 2015 09:14:41 -0500 (EST) Received: from SUSHDC7996.TD.TERADATA.COM (unknown [153.65.10.242]) by rpc7292.td.teradata.com (Postfix) with ESMTPS id 51E25258090 for ; Mon, 2 Nov 2015 09:14:41 -0500 (EST) Received: from SUSHDC8000.TD.TERADATA.COM ([fe80::557c:3e42:2bd0:6e2b]) by SUSHDC7996.TD.TERADATA.COM ([::1]) with mapi id 14.03.0248.002; Mon, 2 Nov 2015 09:13:52 -0500 From: "Vishwakarma, Chhaya" To: "user@hadoop.apache.org" Subject: RE: Authenticating to Kerberos enabled Hadoop cluster using Java Thread-Topic: Authenticating to Kerberos enabled Hadoop cluster using Java Thread-Index: AdEVW0VKJoMuU8k6Te6x/bMYwxuDlAAKp/eAAApygBD//7dVAP//2rIA Date: Mon, 2 Nov 2015 14:13:51 +0000 Message-ID: <9F9DE72B96464A44901B056CE36E33D8016E2080@SUSHDC8000.TD.TERADATA.COM> References: <9F9DE72B96464A44901B056CE36E33D8016E200F@SUSHDC8000.TD.TERADATA.COM> <9F9DE72B96464A44901B056CE36E33D8016E2025@SUSHDC8000.TD.TERADATA.COM> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.65.20.135] Content-Type: multipart/alternative; boundary="_000_9F9DE72B96464A44901B056CE36E33D8016E2080SUSHDC8000TDTER_" MIME-Version: 1.0 X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSVA-8.5.0.1618-8.0.0.1202-21916.007 X-TM-AS-Result: No--26.291-7.0-31-10 X-imss-scan-details: No--26.291-7.0-31-10 X-TM-AS-User-Approved-Sender: No X-TMASE-Version: IMSVA-8.5.0.1618-8.0.1202-21916.007 X-TMASE-Result: 10--26.291500-5.000000 X-TMASE-MatchedRID: dL10VBB8yodgyQAHv9EXtxhTGJQ1M8K9Kx5ICGp/WtG1FeFXyekgdFLW PwZySxYUjeoTJuMpcA+wTICboX1jIthxCsvRDKi2FYJUGv4DL3xR3sGN+j7mNBP083GflnozfQ2 8T7selJzKfWqSBqi646JOf1PYxxJLGe7WfK7A/DN0CDjJ3XioBCFq4bKNOR/1cBu9rPc/2X92RA 7dwpY2g+MX0DCIvVI0kyxtJ1qlHNOmR/fjfo0BcCa1MaKuob8PWwRYAfogvah0PA/ki2kI7BxJE X0k/k7OLiNvWfV40DfniZuiwpS5h8IrF13eYpRriguiJuCNURcAAp5BjtdvFe9UlKvoTh5CW+v0 m5ycBq/OQf/S1XvtED2KHN8dcRYEU3mQhmdh4RhjiC4p+/AIFjMffNZYCk3D+5+93dPb6/d3p4T isZFq8WpwveRKO5XudkETzq6P4e1cvC4hPS8YXiI9MxSOQ6CStWrGVTnl6LgCzt/m2+zn6EwfZx lmJ6hwl9g2YZCNMvKVlQkMVlSHlNdjDUFFva8kLy5CMft0dkDb4SkGdkTN9fQ447WhRWhZjm2ra GZ+IgG7sLiGJ4XBUoAy6p60ZV62jWQsmj6To3IgBwKKRHe+r02XdFg+l3lXLgUEFSBXIPoHr/xQ 68aZCixzdk/xJef9WKY6qodUpMU= --_000_9F9DE72B96464A44901B056CE36E33D8016E2080SUSHDC8000TDTER_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Code is successfully authenticating to Kerberos but when I try to run any h= dfs command I get error as "Failed to specify server's kerberos principal n= ame" Can somebody please assist me on this? Sent from my android device. -----Original Message----- From: andreina j To: "user@hadoop.apache.org" Sent: Mon, 02 Nov 2015 4:57 pm Subject: RE: Authenticating to Kerberos enabled Hadoop cluster using Java Hi Chhaya, Please find below sample code . System.setProperty("java.security.krb5.conf", "D:\\data\\Desktop\\cluster= -test\\krb5.conf"); // Login using keytab if have access to keytab. else UserGroupInformation.loginUserFromKeytab("hdfs/hadoop@HADOOP.COM", " D:\\data\\Desktop\\cluster-test\\conf\\hdfs.keytab"); Note: Above 2 lines should be at the beginning in your application. Regards Andreina J From: Vishwakarma, Chhaya [mailto:Chhaya.Vishwakarma@Thinkbiganalytics.com] Sent: 02 November 2015 PM 04:20 To: user@hadoop.apache.org Subject: RE: Authenticating to Kerberos enabled Hadoop cluster using Java Thanks Niranjan It would be great if you can share a sample code if any? From: Niranjan Subramanian [mailto:niranjan@webaction.com] Sent: 02 November 2015 16:18 To: user@hadoop.apache.org Subject: Re: Authenticating to Kerberos enabled Hadoop cluster using Java Hi Chhaya, You can use the UserGroupInformation class from org.apache.hadoop.security = package. Specifically following 2 methods of that class UserGroupInformation.setConfiguration(hdfsConfiguration); UserGroupInformation.loginUserFromKeytab(principal, keytabPath); Regards, Niranjan On 02-Nov-2015, at 4:15 pm, Vishwakarma, Chhaya > wrote: I have Kerberos enabled Hadoop cluster, I need to perform HDFS operations u= sing JAVA code. I have keytab file and username can someone please suggest how can I authet= icate to Kerberos using JAVA code? Regards, Chhaya --_000_9F9DE72B96464A44901B056CE36E33D8016E2080SUSHDC8000TDTER_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Code is successfully authenticating to Kerberos but when I try to run = any hdfs command I get error as "Failed to specify server's kerberos p= rincipal name"

Can somebody please assist me on this?

Sent from my android device= .

-----Original Message-----
From: andreina j <andreina.j@huawei.com>
To: "user@hadoop.apache.org" <user@hadoop.apache.org>
Sent: Mon, 02 Nov 2015 4:57 pm
Subject: RE: Authenticating to Kerberos enabled Hadoop cluster using Java

Hi Chhaya,

&n= bsp;

Please = find below sample code .

&n= bsp;

  System.setProperty("java.security.krb5.co= nf", "D:\\data\\Desktop\\cluster-test\\krb5.conf");

// Login using keytab if have access to keytab. else
    UserGroupInformation.loginUserFromKeytab("hdfs/hado= op@HADOOP.COM",
       "  D:\\dat= a\\Desktop\\cluster-test\\conf\\hdfs.keytab");

 

Note: A= bove 2 lines should be at the beginning  in your application.

&n= bsp;

Regards=

Andreina J

 <= /p>

From: Vishwaka= rma, Chhaya [mailto:Chhaya.Vishwakarma@Thinkbiganalytics.com]
Sent: 02 November 2015 PM 04:20
To: user@hadoop.apache.org
Subject: RE: Authenticating to Kerberos enabled Hadoop cluster using= Java

 

Thanks Nir= anjan It would be great if you c= an share a sample code if any?

 = ;

From: Niranjan= Subramanian [mailto:niranjan@web= action.com]
Sent: 02 November 2015 16:18
To: user@hadoop.apache.org=
Subject: Re: Authenticating to Kerberos enabled Hadoop cluster using= Java

 

Hi Chhaya, 

 

You can use the UserGroupInform= ation class from org.apache.hadoop.security package. 

 

Specifically following 2 method= s of that class 

 

UserGroupInformation.setConfigu= ration(hdfsConfiguration); 

UserGroupInformation.loginUserF= romKeytab(principal, keytabPath);

 

Regards,

Niranjan

 

On 02-Nov-2015, at 4:15 pm, Vis= hwakarma, Chhaya <Chhaya.Vishwakarma@Thinkbiganalytics.com> wrote:

=  

I have Kerberos enabled Hadoop clus= ter, I need to perform HDFS operations using JAVA code.

I have keytab file and username= can someone please suggest how can I autheticate to Kerberos using JAVA co= de?

Regards,

Chhaya=

 

--_000_9F9DE72B96464A44901B056CE36E33D8016E2080SUSHDC8000TDTER_--