Home | About | Sematext search-lucene.com search-hadoop.com
 Search Hadoop and all its subprojects:

Switch to Threaded View
HBase >> mail # user >> Internals of HBase shell to connect with a secure HBase cluster


Copy link to this message
-
Re: Internals of HBase shell to connect with a secure HBase cluster
Thanks, Andrew.
On Tue, Sep 3, 2013 at 1:33 PM, Andrew Purtell <[EMAIL PROTECTED]> wrote:

> You will also need the below site properties for the HBase client / shell.
> They toggle on secure UGI and select the correct RPC engine.
>
> <property>
>  <name>hbase.security.authentication</name>
>  <value>kerberos</value>
> </property>
>
> <property>
>  <name>hbase.rpc.engine</name>
>   <value>org.apache.hadoop.hbase.ipc.SecureRpcEngine</value>
> </property>
>
>
>
>
> On Monday, September 2, 2013, anil gupta wrote:
>
> > Hi Ted,
> >
> > We dont have any problem in running kinit command and invoking hbase
> shell.
> > We are trying to know the classpath required to invoke a hbase cluster?
> and
> > Does HBase shell has some special code to connect to HBase cluster? or It
> > just uses the -Djava.security.auth.login.config=/etc/hbase/conf/jaas.conf
> > to connect?
> >
> > Thanks,
> > Anil Gupta
> >
> >
> > On Mon, Sep 2, 2013 at 12:27 PM, Ted Yu <[EMAIL PROTECTED]
> <javascript:;>>
> > wrote:
> >
> > > Here is sample kinit command:
> > >
> > > /usr/bin/kinit  -k -t path-to-user.headless.keytab user
> > >
> > > Take a look at the following in
> > > http://hbase.apache.org/book.html#trouble.client:
> > > 13.5.8 Secure Client Cannot Connect ([Caused by GSSException: No valid
> > > credentials provided (Mechanism level: Failed to find any Kerberos
> tgt)])
> > > Cheers
> > >
> > >
> > > On Mon, Sep 2, 2013 at 11:36 AM, James Taylor <[EMAIL PROTECTED]
> <javascript:;>
> > > >wrote:
> > >
> > > > Or phrased another way: Taking Phoenix out of the equation, Anil
> would
> > > like
> > > > to figure out the necessary arguments and correct classpath to invoke
> > the
> > > > HBase shell against a secure HBase cluster. Once he's figured this
> out,
> > > he
> > > > plans to use the same setup to connect the Phoenix terminal client
> > (which
> > > > adds a couple jars to the classpath for sqlline) to the same secure
> > HBase
> > > > cluster.
> > > >
> > > > Any help is greatly appreciated. Thanks,
> > > >
> > > > James
> > > >
> > > >
> > > > On Mon, Sep 2, 2013 at 11:09 AM, anil gupta <[EMAIL PROTECTED]
> <javascript:;>
> > >
> > > wrote:
> > > >
> > > > > Hi Guys,
> > > > >
> > > > > From last 1 week i have been trying to connect Phoenix to a secure
> > > HBase
> > > > > cluster. I have been working with Phoenix team to get it going(
> > > > > https://github.com/forcedotcom/phoenix/issues/382).
> Unfortunately, i
> > > > > haven't been successful.
> > > > >
> > > > > We currently use hbase shell for some querying but we would like to
> > > move
> > > > to
> > > > > a SQL like interface so we want Phoenix.
> > > > > As per my analysis of hbase shell, We do kinit and then run shell,
> it
> > > is
> > > > > able to connect to secure HBase by using the following java
> property:
> > > > > -Djava.security.auth.login.config=/etc/hbase/conf/jaas.conf
> > > > >
> > > > > HBase shell doesnt uses anything extra(apart from jaas.conf) for
> > > > connecting
> > > > > to secure cluster. Right?
> > > > >
> > > > > We are using cdh4.3 i.e. HBase0.94.6.
> > > > >
> > > > > --
> > > > > Thanks & Regards,
> > > > > Anil Gupta
> > > > >
> > > >
> > >
> >
> >
> >
> > --
> > Thanks & Regards,
> > Anil Gupta
> >
>
>
> --
> Best regards,
>
>    - Andy
>
> Problems worthy of attack prove their worth by hitting back. - Piet Hein
> (via Tom White)
>

--
Thanks & Regards,
Anil Gupta