Home | About | Sematext search-lucene.com search-hadoop.com
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB
 Search Hadoop and all its subprojects:

Switch to Threaded View
HBase >> mail # user >> sqoop import into secure Hbase with kerberos


Copy link to this message
-
Re: sqoop import into secure Hbase with kerberos
In addition to Gary's suggestion.

Try to scan "_acl_" table and check that kuser1 should have proper
permissions.
I haven't used Sqoop for loading data directly into HBase. But, i have used
MR to load data into HBase. So, you might have to look at the way the MR
job from sqoop is set-up.
These two methods should be present in the MR job set-up for HBase:
HBaseConfiguration.merge(conf, HBaseConfiguration.create(conf));
TableMapReduceUtil.initCredentials(job);

If the above two method calls are missing then Sqoop might have problems in
loading data. Maybe you can ask this on Sqoop mailing list.
On Mon, Aug 5, 2013 at 6:33 PM, Gary Helmling <[EMAIL PROTECTED]> wrote:

> To further isolate the problem, try doing some simple commands from the
> hbase shell after obtaining kerberos credentials:
>
> 1) kinit
> 2) hbase shell
> 3) in hbase shell:
>   create 'testtable', 'f'
>   put 'testtable', 'r1', 'f:col1', 'val1'
>   get 'testtable', 'r1'
>
> If these all work, then the HBase code is correctly recognizing and
> utilizing your kerberos credentials, and there may be a problem with
> getting the credentials passed through the sqoop process.  If these
> commands do _not_ work, then there is a problem with your kerberos / HBase
> security setup.  For example. it could be a mismatch in the encryption
> ciphers (most kerberos configs will default to AES which is not or at least
> was not previously supported in Java 6 without the "unlimited strength" JCE
> policy files).
>
>
> On Mon, Aug 5, 2013 at 6:14 PM, ssatish <[EMAIL PROTECTED]> wrote:
>
> > I got the grant working for user by adding kuser1 to sudo users list by
> > adding the following code to hbase-site.xml and restarting master and
> > region
> > servers.
> >
> > hbase.superuser
> > kuser1
> >
> > But I still get the ImportTool error -  ERROR tool.ImportTool: Error
> during
> > import: Can't get authentication token
> >
> >
> >
> > --
> > View this message in context:
> >
> http://apache-hbase.679495.n3.nabble.com/sqoop-import-into-secure-Hbase-with-kerberos-tp4048847p4048864.html
> > Sent from the HBase User mailing list archive at Nabble.com.
> >
>

--
Thanks & Regards,
Anil Gupta
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB