Mailing-List: contact user-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@hbase.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAEg_P-J5zxv=TLR7OMDeFHx_wnYFB69qukWCcYDR2u+cLLakHw@mail.gmail.com>
References: 
 <CAEg_P-++O_3dgygyp5Uf8mJ=uU_nVQ2MDNGyHfO1x+Usk-0C=A@mail.gmail.com>
 <CALte62w8YtbmZq9jtWEAdA-cJv5ZFds-Wu-9W63jP9PZyJW=cw@mail.gmail.com>
 <CAEg_P-LOfhwuUkw0KQZ0NHKiTZyNGebDYnmT72BPggi7avjuaQ@mail.gmail.com>
 <CAEg_P-KqvZ7E+VJpEXBSUnDrvc5MO+Srf_BV3qb9681yi1gHcQ@mail.gmail.com>
 <CAEg_P-LUEYKo65c2FWR+k6FzxyyvobrX=G7y0OzWg-8tL69xzg@mail.gmail.com>
 <CAF1+Vs8zcemVoRrGeA=tRWWoK9e8buktCenDNCHwZUJ1WNKgig@mail.gmail.com>
 <CAEg_P-LWUvsxLiiuNwLkF5A7cVE77qmy57jKQ2GKPsug2OyM_w@mail.gmail.com>
 <CAKezTHjSYjUJP_TX7=UGJN2nEZXkXQNrUUwaUEOAzdRa2ijwqQ@mail.gmail.com>
 <CAEg_P-J5zxv=TLR7OMDeFHx_wnYFB69qukWCcYDR2u+cLLakHw@mail.gmail.com>
From: anil gupta <anilgupta84@gmail.com>
Date: Thu, 27 Aug 2015 09:24:02 -0700
Message-ID: 
 <CAF1+Vs9cOPnEn0iAijEXQH9bY3bdqLHU=cLfivdJh-8BSHZsig@mail.gmail.com>
Subject: Re: Problem with HBase + Kerberos
To: "user@hbase.apache.org" <user@hbase.apache.org>
Content-Type: multipart/alternative; boundary=001a1139fa88519e10051e4d66f7

--001a1139fa88519e10051e4d66f7
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Maybe, this is related to some Ambari setup? Can you also ask on Ambari
mailing list.
IMO, secure HBase cluster connectivity has been working in HBase for a very
long time.

On Thu, Aug 27, 2015 at 12:48 AM, Lo=C3=AFc Chanel <loic.chanel@telecomnanc=
y.net>
wrote:

> I did not, but as I Kerberized my cluster with Ambari, it did the mandato=
ry
> modifications.
>
> Lo=C3=AFc CHANEL
> Engineering student at TELECOM Nancy
> Trainee at Worldline - Villeurbanne
>
> 2015-08-27 1:17 GMT+02:00 Laurent H <laurent.hatier@gmail.com>:
>
> > Do you change some stuff in your hbase-site.xml when you've installed
> > Kerberos ?
> >
> > --
> > Laurent HATIER - Consultant Big Data & Business Intelligence chez
> CapGemini
> > fr.linkedin.com/pub/laurent-hatier/25/36b/a86/
> > <http://fr.linkedin.com/pub/laurent-h/25/36b/a86/>
> >
> > 2015-08-21 9:44 GMT+02:00 Lo=C3=AFc Chanel <loic.chanel@telecomnancy.ne=
t>:
> >
> > > Sorry if I didn't mention that, but yeah, I ran kinit before invoking
> > hbase
> > > shell, and klists command says that my user has a ticket.
> > > [root@host /]# klist
> > > Ticket cache: FILE:/tmp/krb5cc_0
> > > Default principal: testuser@REALM
> > >
> > > Valid starting     Expires            Service principal
> > > 08/21/15 09:39:33  08/22/15 09:39:33  krbtgt/REALM@REALM
> > >         renew until 08/21/15 09:39:33
> > >
> > >
> > > Lo=C3=AFc CHANEL
> > > Engineering student at TELECOM Nancy
> > > Trainee at Worldline - Villeurbanne
> > >
> > > 2015-08-21 6:12 GMT+02:00 anil gupta <anilgupta84@gmail.com>:
> > >
> > > > Did you run kinit command before invoking "hbase shell"? What does
> > klist
> > > > command says?
> > > >
> > > > On Thu, Aug 20, 2015 at 6:47 AM, Lo=C3=AFc Chanel <
> > > loic.chanel@telecomnancy.net
> > > > >
> > > > wrote:
> > > >
> > > > > By the way, as this may help to find my issue, I just tested typi=
ng
> > > > *whoami
> > > > > *in HBase shell : this returned me exactly what it should :
> > > > > testuser@REALM (auth:KERBEROS)
> > > > >     groups: nobody, toast
> > > > >
> > > > > Lo=C3=AFc CHANEL
> > > > > Engineering student at TELECOM Nancy
> > > > > Trainee at Worldline - Villeurbanne
> > > > >
> > > > > 2015-08-20 15:17 GMT+02:00 Lo=C3=AFc Chanel <
> loic.chanel@telecomnancy.net
> > >:
> > > > >
> > > > > > Nothing more with your option :/
> > > > > >
> > > > > > Lo=C3=AFc CHANEL
> > > > > > Engineering student at TELECOM Nancy
> > > > > > Trainee at Worldline - Villeurbanne
> > > > > >
> > > > > > 2015-08-20 15:04 GMT+02:00 Lo=C3=AFc Chanel <
> > loic.chanel@telecomnancy.net
> > > >:
> > > > > >
> > > > > >> I'm using HDP 2.2.4.2, with HBase 0.98.4.2.2.
> > > > > >> I have unlimited strength JCE installed.
> > > > > >>
> > > > > >> I'll try to have more clues with this option.
> > > > > >>
> > > > > >> Lo=C3=AFc CHANEL
> > > > > >> Engineering student at TELECOM Nancy
> > > > > >> Trainee at Worldline - Villeurbanne
> > > > > >>
> > > > > >> 2015-08-20 14:58 GMT+02:00 Ted Yu <yuzhihong@gmail.com>:
> > > > > >>
> > > > > >>> Which hbase / hadoop release are you using ?
> > > > > >>>
> > > > > >>> Running with -Dsun.security.krb5.debug=3Dtrue will provide mo=
re
> > clue.
> > > > > >>>
> > > > > >>> Do you have unlimited strength JCE installed ?
> > > > > >>>
> > > > > >>> Cheers
> > > > > >>>
> > > > > >>> On Thu, Aug 20, 2015 at 5:46 AM, Lo=C3=AFc Chanel <
> > > > > >>> loic.chanel@telecomnancy.net>
> > > > > >>> wrote:
> > > > > >>>
> > > > > >>> > Hi all,
> > > > > >>> >
> > > > > >>> > Since I kerberized my cluster, it seems like I can't use
> HBase
> > > > > anymore
> > > > > >>> ...
> > > > > >>> > For example, executing  create 'toto','titi' on HBase shell
> > > results
> > > > > in
> > > > > >>> the
> > > > > >>> > printing of this line endlessly :
> > > > > >>> > WARN  [main] security.UserGroupInformation: Not attempting =
to
> > > > > re-login
> > > > > >>> > since the last re-login was attempted less than 600 seconds
> > > before.
> > > > > >>> >
> > > > > >>> > And nothing else happens.
> > > > > >>> > I tried to restart HDFS and HBase, and to re-generate
> > credentials
> > > > and
> > > > > >>> > keytabs, but nothing changed.
> > > > > >>> > As for the logs, they are not very explicits, as the only
> thing
> > > > they
> > > > > >>> say
> > > > > >>> > (and keep saying) is :
> > > > > >>> >
> > > > > >>> > 2015-08-20 13:50:12,697 DEBUG [RpcServer.reader=3D2,port=3D=
60000]
> > > > > >>> > ipc.RpcServer: Created SASL server with mechanism =3D GSSAP=
I
> > > > > >>> > 2015-08-20 13:50:12,698 DEBUG [RpcServer.reader=3D2,port=3D=
60000]
> > > > > >>> > ipc.RpcServer: Have read input token of size 650 for
> processing
> > > by
> > > > > >>> > saslServer.evaluateResponse()
> > > > > >>> > 2015-08-20 13:50:12,704 DEBUG [RpcServer.reader=3D2,port=3D=
60000]
> > > > > >>> > ipc.RpcServer: Will send token of size 108 from saslServer.
> > > > > >>> > 2015-08-20 13:50:12,706 DEBUG [RpcServer.reader=3D2,port=3D=
60000]
> > > > > >>> > ipc.RpcServer: Have read input token of size 0 for processi=
ng
> > by
> > > > > >>> > saslServer.evaluateResponse()
> > > > > >>> > 2015-08-20 13:50:12,707 DEBUG [RpcServer.reader=3D2,port=3D=
60000]
> > > > > >>> > ipc.RpcServer: Will send token of size 32 from saslServer.
> > > > > >>> > 2015-08-20 13:50:12,708 DEBUG [RpcServer.reader=3D2,port=3D=
60000]
> > > > > >>> > ipc.RpcServer: RpcServer.listener,port=3D60000: DISCONNECTI=
NG
> > > client
> > > > > >>> > 192.168.6.148:43014 because read count=3D-1. Number of acti=
ve
> > > > > >>> connections: 3
> > > > > >>> >
> > > > > >>> > Do anyone has an idea about where this might come from, or
> how
> > to
> > > > > >>> solve it
> > > > > >>> > ? Because I couldn't find much documentation about this.
> > > > > >>> > Thanks in advance for your help !
> > > > > >>> >
> > > > > >>> >
> > > > > >>> > Lo=C3=AFc
> > > > > >>> >
> > > > > >>> > Lo=C3=AFc CHANEL
> > > > > >>> > Engineering student at TELECOM Nancy
> > > > > >>> > Trainee at Worldline - Villeurbanne
> > > > > >>> >
> > > > > >>>
> > > > > >>
> > > > > >>
> > > > > >
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > Thanks & Regards,
> > > > Anil Gupta
> > > >
> > >
> >
>


--=20
Thanks & Regards,
Anil Gupta

--001a1139fa88519e10051e4d66f7--