hbase-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Laurent H <laurent.hat...@gmail.com>
Subject Re: Problem with HBase + Kerberos
Date Wed, 26 Aug 2015 23:17:56 GMT
Do you change some stuff in your hbase-site.xml when you've installed
Kerberos ?

--
Laurent HATIER - Consultant Big Data & Business Intelligence chez CapGemini
fr.linkedin.com/pub/laurent-hatier/25/36b/a86/
<http://fr.linkedin.com/pub/laurent-h/25/36b/a86/>

2015-08-21 9:44 GMT+02:00 Loïc Chanel <loic.chanel@telecomnancy.net>:

> Sorry if I didn't mention that, but yeah, I ran kinit before invoking hbase
> shell, and klists command says that my user has a ticket.
> [root@host /]# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: testuser@REALM
>
> Valid starting     Expires            Service principal
> 08/21/15 09:39:33  08/22/15 09:39:33  krbtgt/REALM@REALM
>         renew until 08/21/15 09:39:33
>
>
> Loïc CHANEL
> Engineering student at TELECOM Nancy
> Trainee at Worldline - Villeurbanne
>
> 2015-08-21 6:12 GMT+02:00 anil gupta <anilgupta84@gmail.com>:
>
> > Did you run kinit command before invoking "hbase shell"? What does klist
> > command says?
> >
> > On Thu, Aug 20, 2015 at 6:47 AM, Loïc Chanel <
> loic.chanel@telecomnancy.net
> > >
> > wrote:
> >
> > > By the way, as this may help to find my issue, I just tested typing
> > *whoami
> > > *in HBase shell : this returned me exactly what it should :
> > > testuser@REALM (auth:KERBEROS)
> > >     groups: nobody, toast
> > >
> > > Loïc CHANEL
> > > Engineering student at TELECOM Nancy
> > > Trainee at Worldline - Villeurbanne
> > >
> > > 2015-08-20 15:17 GMT+02:00 Loïc Chanel <loic.chanel@telecomnancy.net>:
> > >
> > > > Nothing more with your option :/
> > > >
> > > > Loïc CHANEL
> > > > Engineering student at TELECOM Nancy
> > > > Trainee at Worldline - Villeurbanne
> > > >
> > > > 2015-08-20 15:04 GMT+02:00 Loïc Chanel <loic.chanel@telecomnancy.net
> >:
> > > >
> > > >> I'm using HDP 2.2.4.2, with HBase 0.98.4.2.2.
> > > >> I have unlimited strength JCE installed.
> > > >>
> > > >> I'll try to have more clues with this option.
> > > >>
> > > >> Loïc CHANEL
> > > >> Engineering student at TELECOM Nancy
> > > >> Trainee at Worldline - Villeurbanne
> > > >>
> > > >> 2015-08-20 14:58 GMT+02:00 Ted Yu <yuzhihong@gmail.com>:
> > > >>
> > > >>> Which hbase / hadoop release are you using ?
> > > >>>
> > > >>> Running with -Dsun.security.krb5.debug=true will provide more
clue.
> > > >>>
> > > >>> Do you have unlimited strength JCE installed ?
> > > >>>
> > > >>> Cheers
> > > >>>
> > > >>> On Thu, Aug 20, 2015 at 5:46 AM, Loïc Chanel <
> > > >>> loic.chanel@telecomnancy.net>
> > > >>> wrote:
> > > >>>
> > > >>> > Hi all,
> > > >>> >
> > > >>> > Since I kerberized my cluster, it seems like I can't use
HBase
> > > anymore
> > > >>> ...
> > > >>> > For example, executing  create 'toto','titi' on HBase shell
> results
> > > in
> > > >>> the
> > > >>> > printing of this line endlessly :
> > > >>> > WARN  [main] security.UserGroupInformation: Not attempting
to
> > > re-login
> > > >>> > since the last re-login was attempted less than 600 seconds
> before.
> > > >>> >
> > > >>> > And nothing else happens.
> > > >>> > I tried to restart HDFS and HBase, and to re-generate credentials
> > and
> > > >>> > keytabs, but nothing changed.
> > > >>> > As for the logs, they are not very explicits, as the only
thing
> > they
> > > >>> say
> > > >>> > (and keep saying) is :
> > > >>> >
> > > >>> > 2015-08-20 13:50:12,697 DEBUG [RpcServer.reader=2,port=60000]
> > > >>> > ipc.RpcServer: Created SASL server with mechanism = GSSAPI
> > > >>> > 2015-08-20 13:50:12,698 DEBUG [RpcServer.reader=2,port=60000]
> > > >>> > ipc.RpcServer: Have read input token of size 650 for processing
> by
> > > >>> > saslServer.evaluateResponse()
> > > >>> > 2015-08-20 13:50:12,704 DEBUG [RpcServer.reader=2,port=60000]
> > > >>> > ipc.RpcServer: Will send token of size 108 from saslServer.
> > > >>> > 2015-08-20 13:50:12,706 DEBUG [RpcServer.reader=2,port=60000]
> > > >>> > ipc.RpcServer: Have read input token of size 0 for processing
by
> > > >>> > saslServer.evaluateResponse()
> > > >>> > 2015-08-20 13:50:12,707 DEBUG [RpcServer.reader=2,port=60000]
> > > >>> > ipc.RpcServer: Will send token of size 32 from saslServer.
> > > >>> > 2015-08-20 13:50:12,708 DEBUG [RpcServer.reader=2,port=60000]
> > > >>> > ipc.RpcServer: RpcServer.listener,port=60000: DISCONNECTING
> client
> > > >>> > 192.168.6.148:43014 because read count=-1. Number of active
> > > >>> connections: 3
> > > >>> >
> > > >>> > Do anyone has an idea about where this might come from, or
how to
> > > >>> solve it
> > > >>> > ? Because I couldn't find much documentation about this.
> > > >>> > Thanks in advance for your help !
> > > >>> >
> > > >>> >
> > > >>> > Loïc
> > > >>> >
> > > >>> > Loïc CHANEL
> > > >>> > Engineering student at TELECOM Nancy
> > > >>> > Trainee at Worldline - Villeurbanne
> > > >>> >
> > > >>>
> > > >>
> > > >>
> > > >
> > >
> >
> >
> >
> > --
> > Thanks & Regards,
> > Anil Gupta
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message