Home | About | Sematext search-lucene.com search-hadoop.com
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB
 Search Hadoop and all its subprojects:

Switch to Threaded View
HBase >> mail # user >> Internals of HBase shell to connect with a secure HBase cluster


Copy link to this message
-
Re: Internals of HBase shell to connect with a secure HBase cluster
Thanks, Andrew.
On Tue, Sep 3, 2013 at 1:33 PM, Andrew Purtell <[EMAIL PROTECTED]> wrote:

> You will also need the below site properties for the HBase client / shell.
> They toggle on secure UGI and select the correct RPC engine.
>
> <property>
>  <name>hbase.security.authentication</name>
>  <value>kerberos</value>
> </property>
>
> <property>
>  <name>hbase.rpc.engine</name>
>   <value>org.apache.hadoop.hbase.ipc.SecureRpcEngine</value>
> </property>
>
>
>
>
> On Monday, September 2, 2013, anil gupta wrote:
>
> > Hi Ted,
> >
> > We dont have any problem in running kinit command and invoking hbase
> shell.
> > We are trying to know the classpath required to invoke a hbase cluster?
> and
> > Does HBase shell has some special code to connect to HBase cluster? or It
> > just uses the -Djava.security.auth.login.config=/etc/hbase/conf/jaas.conf
> > to connect?
> >
> > Thanks,
> > Anil Gupta
> >
> >
> > On Mon, Sep 2, 2013 at 12:27 PM, Ted Yu <[EMAIL PROTECTED]
> <javascript:;>>
> > wrote:
> >
> > > Here is sample kinit command:
> > >
> > > /usr/bin/kinit  -k -t path-to-user.headless.keytab user
> > >
> > > Take a look at the following in
> > > http://hbase.apache.org/book.html#trouble.client:
> > > 13.5.8 Secure Client Cannot Connect ([Caused by GSSException: No valid
> > > credentials provided (Mechanism level: Failed to find any Kerberos
> tgt)])
> > > Cheers
> > >
> > >
> > > On Mon, Sep 2, 2013 at 11:36 AM, James Taylor <[EMAIL PROTECTED]
> <javascript:;>
> > > >wrote:
> > >
> > > > Or phrased another way: Taking Phoenix out of the equation, Anil
> would
> > > like
> > > > to figure out the necessary arguments and correct classpath to invoke
> > the
> > > > HBase shell against a secure HBase cluster. Once he's figured this
> out,
> > > he
> > > > plans to use the same setup to connect the Phoenix terminal client
> > (which
> > > > adds a couple jars to the classpath for sqlline) to the same secure
> > HBase
> > > > cluster.
> > > >
> > > > Any help is greatly appreciated. Thanks,
> > > >
> > > > James
> > > >
> > > >
> > > > On Mon, Sep 2, 2013 at 11:09 AM, anil gupta <[EMAIL PROTECTED]
> <javascript:;>
> > >
> > > wrote:
> > > >
> > > > > Hi Guys,
> > > > >
> > > > > From last 1 week i have been trying to connect Phoenix to a secure
> > > HBase
> > > > > cluster. I have been working with Phoenix team to get it going(
> > > > > https://github.com/forcedotcom/phoenix/issues/382).
> Unfortunately, i
> > > > > haven't been successful.
> > > > >
> > > > > We currently use hbase shell for some querying but we would like to
> > > move
> > > > to
> > > > > a SQL like interface so we want Phoenix.
> > > > > As per my analysis of hbase shell, We do kinit and then run shell,
> it
> > > is
> > > > > able to connect to secure HBase by using the following java
> property:
> > > > > -Djava.security.auth.login.config=/etc/hbase/conf/jaas.conf
> > > > >
> > > > > HBase shell doesnt uses anything extra(apart from jaas.conf) for
> > > > connecting
> > > > > to secure cluster. Right?
> > > > >
> > > > > We are using cdh4.3 i.e. HBase0.94.6.
> > > > >
> > > > > --
> > > > > Thanks & Regards,
> > > > > Anil Gupta
> > > > >
> > > >
> > >
> >
> >
> >
> > --
> > Thanks & Regards,
> > Anil Gupta
> >
>
>
> --
> Best regards,
>
>    - Andy
>
> Problems worthy of attack prove their worth by hitting back. - Piet Hein
> (via Tom White)
>

--
Thanks & Regards,
Anil Gupta
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB