hbase-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ted Yu <yuzhih...@gmail.com>
Subject Re: Internals of HBase shell to connect with a secure HBase cluster
Date Mon, 02 Sep 2013 19:27:15 GMT
Here is sample kinit command:

/usr/bin/kinit  -k -t path-to-user.headless.keytab user

Take a look at the following in
http://hbase.apache.org/book.html#trouble.client:
13.5.8 Secure Client Cannot Connect ([Caused by GSSException: No valid
credentials provided (Mechanism level: Failed to find any Kerberos tgt)])
Cheers


On Mon, Sep 2, 2013 at 11:36 AM, James Taylor <jtaylor@salesforce.com>wrote:

> Or phrased another way: Taking Phoenix out of the equation, Anil would like
> to figure out the necessary arguments and correct classpath to invoke the
> HBase shell against a secure HBase cluster. Once he's figured this out, he
> plans to use the same setup to connect the Phoenix terminal client (which
> adds a couple jars to the classpath for sqlline) to the same secure HBase
> cluster.
>
> Any help is greatly appreciated. Thanks,
>
> James
>
>
> On Mon, Sep 2, 2013 at 11:09 AM, anil gupta <anilgupta84@gmail.com> wrote:
>
> > Hi Guys,
> >
> > From last 1 week i have been trying to connect Phoenix to a secure HBase
> > cluster. I have been working with Phoenix team to get it going(
> > https://github.com/forcedotcom/phoenix/issues/382). Unfortunately, i
> > haven't been successful.
> >
> > We currently use hbase shell for some querying but we would like to move
> to
> > a SQL like interface so we want Phoenix.
> > As per my analysis of hbase shell, We do kinit and then run shell, it is
> > able to connect to secure HBase by using the following java property:
> > -Djava.security.auth.login.config=/etc/hbase/conf/jaas.conf
> >
> > HBase shell doesnt uses anything extra(apart from jaas.conf) for
> connecting
> > to secure cluster. Right?
> >
> > We are using cdh4.3 i.e. HBase0.94.6.
> >
> > --
> > Thanks & Regards,
> > Anil Gupta
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message