Return-Path: X-Original-To: apmail-hbase-user-archive@www.apache.org Delivered-To: apmail-hbase-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 0D0B7C563 for ; Wed, 10 Dec 2014 10:12:10 +0000 (UTC) Received: (qmail 5595 invoked by uid 500); 10 Dec 2014 10:12:08 -0000 Delivered-To: apmail-hbase-user-archive@hbase.apache.org Received: (qmail 5527 invoked by uid 500); 10 Dec 2014 10:12:07 -0000 Mailing-List: contact user-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hbase.apache.org Delivered-To: mailing list user@hbase.apache.org Received: (qmail 5515 invoked by uid 99); 10 Dec 2014 10:12:07 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 10 Dec 2014 10:12:07 +0000 X-ASF-Spam-Status: No, hits=2.7 required=5.0 tests=FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_REPLY,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of ananthu2050@gmail.com designates 209.85.213.181 as permitted sender) Received: from [209.85.213.181] (HELO mail-ig0-f181.google.com) (209.85.213.181) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 10 Dec 2014 10:11:41 +0000 Received: by mail-ig0-f181.google.com with SMTP id l13so2800790iga.2 for ; Wed, 10 Dec 2014 02:11:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=3HhLLFwc64mbg1CWggxxMTa2wB1pADmAdqXZvT54YSw=; b=1GHb6HlgnsQ7hGOf89s4+T/gOmNTKAd7NwxnS6ma4cxddxKoxr+xqy3CF0Klp/Zu+O ZjDpb5jUj1cwYC5X8iu2UFNf6d/S2Kcojq7jxMe5QPx4Sx2YrOY4CE/jyw//RiNZfqdY vd9TwzVUHiW2RZIEG3n7GUp3Rs37kfYxN/FZ05XYSoF4O/ndcu0PmpPpQ05ZD39uX2sR rbFHfuEMmG4TUXzrLwqCfqnFIMgz3STufNpLnuX6UFGTvlwfqTXKrzTKVwF7heR9ClmP URPZZDoBj0gTn52rMyGrj7ae+2hcwnqmDDcxK6l3VMZewPC9B93cHntSiEGxjoBXYNfD CDrg== X-Received: by 10.50.62.104 with SMTP id x8mr25012445igr.2.1418206265603; Wed, 10 Dec 2014 02:11:05 -0800 (PST) MIME-Version: 1.0 Received: by 10.107.41.79 with HTTP; Wed, 10 Dec 2014 02:10:45 -0800 (PST) In-Reply-To: References: From: AnandaVelMurugan Chandra Mohan Date: Wed, 10 Dec 2014 15:40:45 +0530 Message-ID: Subject: Re: Reg. HBase client API calls in secure cluster (Kerberos) To: user@hbase.apache.org Content-Type: multipart/alternative; boundary=047d7bdc1bd0adfdac0509d9e0a2 X-Virus-Checked: Checked by ClamAV on apache.org --047d7bdc1bd0adfdac0509d9e0a2 Content-Type: text/plain; charset=UTF-8 Hi, Thanks for responding back. But I get this error now Failure to initialize security context [Caused by GSSException: Invalid name provided (Mechanism level: Could not load configuration file C:\Windows\krb5.ini (The system cannot find the file specified))] My problem is very similar to this stackflow question http://stackoverflow.com/questions/21193453/how-to-access-secure-kerberized-hadoop-using-just-java-api Basically I want to run the examples in this link http://java.dzone.com/articles/handling-big-data-hbase-part-4 against my secure cluster. Regards, Anand On Wed, Dec 10, 2014 at 11:58 AM, Srikanth Srungarapu wrote: > Hi, > Please take a look at the patch added as part of HBASE-12366 > . There will be a new > AuthUtil. launchAuthChore() which should help in your > case. And also, the documentation patch is here HBASE-12528 > just in case. Hope > this > helps. > Thanks, > Srikanth. > > On Tue, Dec 9, 2014 at 10:11 PM, AnandaVelMurugan Chandra Mohan < > ananthu2050@gmail.com> wrote: > > > Hi All, > > > > My Hbase admin has set up kerberos authentication in our cluster. Now all > > the HBase Java client API calls hang indefinitely. > > I could scan/get in HBase shell, but when I do the same through the java > > api,it hangs in the scan statement. > > > > This is code which was working earlier, but not now. Earlier I was > running > > this code outside of the cluster without any impersonation. > > > > Configuration config = HBaseConfiguration.create(); > > HTable table = new HTable(config, "Assets"); > > Scan Scan = new Scan(); > > ResultScanner results = table.getScanner(Scan); > > > > Do I need to impersonate as any super user to make this work now? How do > I > > pass the kerberos credentials? Any pointers would be greatly appreciated. > > -- > > Regards, > > Anand > > > -- Regards, Anand --047d7bdc1bd0adfdac0509d9e0a2--