[
https://issues.apache.org/jira/browse/IMPALA-3187?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
xujian updated IMPALA-3187:
---------------------------
Attachment: image-2018-10-22-17-23-56-136.png
> Impala with Kerberos jdbc connect error
> ---------------------------------------
>
> Key: IMPALA-3187
> URL: https://issues.apache.org/jira/browse/IMPALA-3187
> Project: IMPALA
> Issue Type: Bug
> Components: Security
> Affects Versions: Impala 2.2.1
> Reporter: nilone
> Priority: Major
> Attachments: image-2018-10-22-17-19-36-031.png,
> image-2018-10-22-17-23-56-136.png
>
>
> when I use beeline connect to impalad server , failed to connect ,
> command is : +beeline -u
> "jdbc:hive2://bd-131:21050/;principal=impala/bd-131@MYCDH"+
> check impalad log ,show error:
> E0316 23:33:07.934474 18988 authentication.cc:148] SASL message (Kerberos
> (external)): GSSAPI Error: Unspecified GSS failure. Minor code may provide
> more information ({color:red}Encryption type DES cbc mode with CRC-32 not
> permitted{color})
> I0316 23:33:07.935238 18988 thrift-util.cc:109] TThreadPoolServer:
> TServerTransport died on accept: SASL(-13): authentication failure: GSSAPI
> Failure: gss_accept_sec_context
> ---------------------------------------------------------------------------------------------------------
> *this is my kerberos ticket info:*
> [root@bd-131 CDH5Test]# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: impala/bd-131@MYCDH
> Valid starting Expires Service principal
> 03/16/16 23:34:36 03/17/16 23:34:25 krbtgt/MYCDH@MYCDH
> renew until 03/21/16 23:34:36
>
> *I init ticket from this keytab file generated by Cloudera Manager*
> [root@bd-131 CDH5Test]# klist -k -e
> /var/run/cloudera-scm-agent/process/697-impala-IMPALAD/impala.keytab
> Keytab name:
> FILE:/var/run/cloudera-scm-agent/process/697-impala-IMPALAD/impala.keytab
> KVNO Principal
> ----
> --------------------------------------------------------------------------
> 2 impala/bd-131@MYCDH (aes256-cts-hmac-sha1-96)
> 2 impala/bd-131@MYCDH (aes128-cts-hmac-sha1-96)
> 2 impala/bd-131@MYCDH (des3-cbc-sha1)
> 2 impala/bd-131@MYCDH (arcfour-hmac)
> 2 impala/bd-131@MYCDH (des-hmac-sha1)
> 2 impala/bd-131@MYCDH (des-cbc-md5)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
