[jira] [Updated] (DRILL-5440) Sqlline is not connecting to Hive database
[
https://issues.apache.org/jira/browse/DRILL-5440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Parag Darji updated DRILL-5440:
---
Summary: Sqlline is not connecting to Hive database (was: Sqlline is not
showing Hive database)
> Sqlline is not connecting to Hive database
> --
>
> Key: DRILL-5440
> URL: https://issues.apache.org/jira/browse/DRILL-5440
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> Sqlline is not showing hive database.
> {code}
> sqlline -u "jdbc:drill:schema:hiveremote;drillbit=host1.fqdn;auth=kerberos"
> apache drill 1.10.0
> "what ever the mind of man can conceive and believe, drill can query"
> 0: jdbc:drill:schema:hiveremote> show schemas;
> +-+
> | SCHEMA_NAME |
> +-+
> | INFORMATION_SCHEMA |
> | sys |
> +-+
> 2 rows selected (2.074 seconds)
> 0: jdbc:drill:schema:hiveremote> show databases;
> +-+
> | SCHEMA_NAME |
> +-+
> | INFORMATION_SCHEMA |
> | sys |
> +-+
> 2 rows selected (0.226 seconds)
> 0: jdbc:drill:schema:hiveremote> !connect jdbc:mysql://hive.fqdn:10010/hive
> Enter username for jdbc:mysql://hive.fqdn:10010/hive:
> {code}
> I've kerberos enabled so I tried below command, but it's giving auth error.
> {code}
> sqlline --maxWidth=1 -u
> "jdbc:drill:schema=hive:drillbit=host1.fqdn;auth=kerberos;principal=drill/host1.f...@lab.com;keytab:/home/drill/.keytab/drill.keytab"
> error: Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Authentication
> failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
> Authentication failed. Incorrect credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Authentication
> failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
> Authentication failed. Incorrect credentials?]
> {code}
> When I try to use username/password, it doesn't return anything, just sits
> there for hours
> {code}
> drill@:/home/drill> sqlline -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos"
> apache drill 1.10.0
> "drill baby drill"
> 0: jdbc:drill:drillbit=> !connect
> Usage: connect[driver]
> 0: jdbc:drill:drillbit=> !connect jdbc:mysql://hivenode.fqdn:10010/hive test
> test
> {code}
> Below query doesn't return anything:
> {code}
> sqlline -u
> "jdbc:mysql://hive.fqdn:10010/default;zk=host1.fqdn:2181;service_name=drill;service_host=host2.fqdn;keytab=/home/drill/.keytab/drill.keytab";user="drill/host2.f...@lab.com"
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Updated] (DRILL-5440) Sqlline is not showing Hive database
[
https://issues.apache.org/jira/browse/DRILL-5440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Parag Darji updated DRILL-5440:
---
Description:
Sqlline is not showing hive database.
{code}
sqlline -u "jdbc:drill:schema:hiveremote;drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"what ever the mind of man can conceive and believe, drill can query"
0: jdbc:drill:schema:hiveremote> show schemas;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (2.074 seconds)
0: jdbc:drill:schema:hiveremote> show databases;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (0.226 seconds)
0: jdbc:drill:schema:hiveremote> !connect jdbc:mysql://hive.fqdn:10010/hive
Enter username for jdbc:mysql://hive.fqdn:10010/hive:
{code}
I've kerberos enabled so I tried below command, but it's giving auth error.
{code}
sqlline --maxWidth=1 -u
"jdbc:drill:schema=hive:drillbit=host1.fqdn;auth=kerberos;principal=drill/host1.f...@lab.com;keytab:/home/drill/.keytab/drill.keytab"
error: Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?]
{code}
When I try to use username/password, it doesn't return anything, just sits
there for hours
{code}
drill@:/home/drill> sqlline -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"drill baby drill"
0: jdbc:drill:drillbit=> !connect
Usage: connect[driver]
0: jdbc:drill:drillbit=> !connect jdbc:mysql://hivenode.fqdn:10010/hive test
test
{code}
Below query doesn't return anything:
{code}
sqlline -u
"jdbc:mysql://hive.fqdn:10010/default;zk=host1.fqdn:2181;service_name=drill;service_host=host2.fqdn;keytab=/home/drill/.keytab/drill.keytab";user="drill/host2.f...@lab.com"
{code}
was:
Sqlline is not showing hive database.
{code}
sqlline -u "jdbc:drill:schema:hiveremote;drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"what ever the mind of man can conceive and believe, drill can query"
0: jdbc:drill:schema:hiveremote> show schemas;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (2.074 seconds)
0: jdbc:drill:schema:hiveremote> show databases;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (0.226 seconds)
0: jdbc:drill:schema:hiveremote> !connect jdbc:mysql://hive.fqdn:10010/hive
Enter username for jdbc:mysql://hive.fqdn:10010/hive:
{code}
I've kerberos enabled so I tried below command, but it's giving auth error.
{code}
sqlline --maxWidth=1 -u
"jdbc:drill:schema=hive:drillbit=host1.fqdn;auth=kerberos;principal=drill/host1.f...@lab.com;keytab:/home/drill/.keytab/drill.keytab"
error: Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?]
{code}
When I try to use username/password, it doesn't return anything, just sits
there for hours
{code}
drill@:/home/drill> sqlline -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"drill baby drill"
0: jdbc:drill:drillbit=> !connect
Usage: connect[driver]
0: jdbc:drill:drillbit=> !connect jdbc:mysql://hivenode.fqdn:10010/hive test
test
{code}
> Sqlline is not showing Hive database
>
>
> Key: DRILL-5440
> URL: https://issues.apache.org/jira/browse/DRILL-5440
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag
[jira] [Updated] (DRILL-5440) Sqlline is not showing Hive database
[
https://issues.apache.org/jira/browse/DRILL-5440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Parag Darji updated DRILL-5440:
---
Description:
Sqlline is not showing hive database.
{code}
sqlline -u "jdbc:drill:schema:hiveremote;drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"what ever the mind of man can conceive and believe, drill can query"
0: jdbc:drill:schema:hiveremote> show schemas;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (2.074 seconds)
0: jdbc:drill:schema:hiveremote> show databases;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (0.226 seconds)
0: jdbc:drill:schema:hiveremote> !connect jdbc:mysql://hive.fqdn:10010/hive
Enter username for jdbc:mysql://hive.fqdn:10010/hive:
{code}
I've kerberos enabled so I tried below command, but it's giving auth error.
{code}
sqlline --maxWidth=1 -u
"jdbc:drill:schema=hive:drillbit=host1.fqdn;auth=kerberos;principal=drill/host1.f...@lab.com;keytab:/home/drill/.keytab/drill.keytab"
error: Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?]
{code}
When I try to use username/password, it doesn't return anything, just sits
there for hours
{code}
drill@:/home/drill> sqlline -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"drill baby drill"
0: jdbc:drill:drillbit=> !connect
Usage: connect[driver]
0: jdbc:drill:drillbit=> !connect jdbc:mysql://hivenode.fqdn:10010/hive test
test
{code}
was:
Sqlline is not showing hive database.
{code}
sqlline -u "jdbc:drill:schema:hiveremote;drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"what ever the mind of man can conceive and believe, drill can query"
0: jdbc:drill:schema:hiveremote> show schemas;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (2.074 seconds)
0: jdbc:drill:schema:hiveremote> show databases;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (0.226 seconds)
0: jdbc:drill:schema:hiveremote> !connect jdbc:mysql://hive.fqdn:10010/hive
Enter username for jdbc:mysql://hive.fqdn:10010/hive:
{code}
I've kerberos enabled so I tried below command, but it's giving auth error.
{code}
sqlline --maxWidth=1 -u
"jdbc:drill:schema=hive:drillbit=host1.fqdn;auth=kerberos;principal=drill/host1.f...@lab.com;keytab:/home/drill/.keytab/drill.keytab"
error: Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?]
{code}
> Sqlline is not showing Hive database
>
>
> Key: DRILL-5440
> URL: https://issues.apache.org/jira/browse/DRILL-5440
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> Sqlline is not showing hive database.
> {code}
> sqlline -u "jdbc:drill:schema:hiveremote;drillbit=host1.fqdn;auth=kerberos"
> apache drill 1.10.0
> "what ever the mind of man can conceive and believe, drill can query"
> 0: jdbc:drill:schema:hiveremote> show schemas;
> +-+
> | SCHEMA_NAME |
> +-+
> | INFORMATION_SCHEMA |
> | sys |
> +-+
> 2 rows selected (2.074
[jira] [Created] (DRILL-5440) Sqlline is not showing Hive database
Parag Darji created DRILL-5440:
--
Summary: Sqlline is not showing Hive database
Key: DRILL-5440
URL: https://issues.apache.org/jira/browse/DRILL-5440
Project: Apache Drill
Issue Type: Task
Components: Functions - Drill
Affects Versions: 1.10.0
Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
Hardware: VmWare
Reporter: Parag Darji
Priority: Minor
Fix For: 1.10.0
Sqlline is not showing hive database.
{code}
sqlline -u "jdbc:drill:schema:hiveremote;drillbit=host1.fqdn;auth=kerberos"
apache drill 1.10.0
"what ever the mind of man can conceive and believe, drill can query"
0: jdbc:drill:schema:hiveremote> show schemas;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (2.074 seconds)
0: jdbc:drill:schema:hiveremote> show databases;
+-+
| SCHEMA_NAME |
+-+
| INFORMATION_SCHEMA |
| sys |
+-+
2 rows selected (0.226 seconds)
0: jdbc:drill:schema:hiveremote> !connect jdbc:mysql://hive.fqdn:10010/hive
Enter username for jdbc:mysql://hive.fqdn:10010/hive:
{code}
I've kerberos enabled so I tried below command, but it's giving auth error.
{code}
sqlline --maxWidth=1 -u
"jdbc:drill:schema=hive:drillbit=host1.fqdn;auth=kerberos;principal=drill/host1.f...@lab.com;keytab:/home/drill/.keytab/drill.keytab"
error: Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed: Authentication
failed. Incorrect credentials? [Caused by javax.security.sasl.SaslException:
Authentication failed. Incorrect credentials?]
{code}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971934#comment-15971934
]
Parag Darji commented on DRILL-5433:
I appreciate your help. You can close this issue. I'll open another one for
Hive if I can't mange to fix it.
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server requires authentication
> using [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:204)
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
> at
> com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85)
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:155)
> ... 21 more
> Caused by: javax.security.sasl.SaslException: Server
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971571#comment-15971571
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 11:22 PM:
--
I set the JAVA_HOME variable in "drill-env.sh" and drill users profile too.
It's still throwing JDK/JRE error.
export JAVA_HOME="/usr/lib/jvm/jre-1.7.0-openjdk.x86_64"
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on host1.fqdn:31010]
(state=,code=0)
0: jdbc:drill:drillbit=>
{code}
was (Author: pd47):
I set the JAVA_HOME variable in "drill-env.sh" and drill users profile too.
It's still throwing JDK/JRE error.
export JAVA_HOME="/usr/lib/jvm/jre-1.7.0-openjdk.x86_64"
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=>
{code}
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971571#comment-15971571
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 11:22 PM:
--
I set the JAVA_HOME variable in "drill-env.sh" and drill users profile too.
It's still throwing JDK/JRE error.
export JAVA_HOME="/usr/lib/jvm/jre-1.7.0-openjdk.x86_64"
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=>
{code}
was (Author: pd47):
I set the JAVA_HOME variable in "drill-env.sh" and drill users profile too.
It's still throwing JDK/JRE error.
export JAVA_HOME="/usr/lib/jvm/jre-1.7.0-openjdk.x86_64"
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=>
{code}
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968136#comment-15968136
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 11:20 PM:
--
I will look into scenario 1 permission.
Sorry I forgot to do the klist for test user.
{code}
host1:/var/log/ambari-server # su - test
test@:/home/test> klist
Ticket cache: FILE:/tmp/krb5cc_5007
Default principal: test/lab...@lab.com
Valid starting ExpiresService principal
04/13/17 15:00:25 04/14/17 15:00:25 krbtgt/lab@lab.com
renew until 04/13/17 15:00:25
test@:/home/test> clear
test@:/home/test> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5007
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG start time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG end time: Fri Apr 14 15:00:25 EDT 2017
>>>DEBUG renew_till time: Thu Apr 13 15:00:25 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=host1.fqdn UDP:88, timeout=3, number of retries =3,
>>> #bytes=659
>>> KDCCommunication: kdc=host1.fqdn UDP:88, timeout=3,Attempt =1, #bytes=659
>>> KrbKdcReq send: #bytes read=161
>>> KdcAccessibility: remove host1.fqdn
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Thu Aug 19 05:00:10 EDT 1982 39859561
sTime is Thu Apr 13 15:46:13 EDT 2017 1492112773000
suSec is 302285
error code is 7
error Message is Server not found in Kerberos database
crealm is LAB.COM
cname is test/labhdp
realm is LAB.COM
sname is drill/ladhdp
msgType is 30
KrbException: Server not found in Kerberos database (7) - UNKNOWN_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:309)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:454)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:231)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:228)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.evaluateChallenge(AuthenticationOutcomeListener.java:228)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.initiate(AuthenticationOutcomeListener.java:89)
at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968136#comment-15968136
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 11:19 PM:
--
I will look into scenario 1 permission.
Sorry I forgot to do the klist for test user.
{code}
host1:/var/log/ambari-server # su - test
test@:/home/test> klist
Ticket cache: FILE:/tmp/krb5cc_5007
Default principal: test/lab...@lab.com
Valid starting ExpiresService principal
04/13/17 15:00:25 04/14/17 15:00:25 krbtgt/lab@lab.com
renew until 04/13/17 15:00:25
test@:/home/test> clear
test@:/home/test> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5007
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG start time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG end time: Fri Apr 14 15:00:25 EDT 2017
>>>DEBUG renew_till time: Thu Apr 13 15:00:25 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=host1.fqdn UDP:88, timeout=3, number of retries =3,
>>> #bytes=659
>>> KDCCommunication: kdc=host1.fqdn UDP:88, timeout=3,Attempt =1, #bytes=659
>>> KrbKdcReq send: #bytes read=161
>>> KdcAccessibility: remove altbthdlhdpsb01.cscdev.com
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Thu Aug 19 05:00:10 EDT 1982 39859561
sTime is Thu Apr 13 15:46:13 EDT 2017 1492112773000
suSec is 302285
error code is 7
error Message is Server not found in Kerberos database
crealm is LAB.COM
cname is test/labhdp
realm is LAB.COM
sname is drill/ladhdp
msgType is 30
KrbException: Server not found in Kerberos database (7) - UNKNOWN_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:309)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:454)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:231)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:228)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.evaluateChallenge(AuthenticationOutcomeListener.java:228)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.initiate(AuthenticationOutcomeListener.java:89)
at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15966582#comment-15966582
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 11:17 PM:
--
I do not see any error in drillbit.log:
{code}
2017-04-12 16:42:49,549 [main] INFO o.a.drill.exec.server.rest.WebServer -
Setting up HTTP connector for web server
2017-04-12 16:42:50,936 [main] INFO o.apache.drill.exec.server.Drillbit -
Startup completed (5728 ms).
{code}
However I do see this error in sqlline.log:
{code}
Override File: file:/opt/drill/conf/drill-override.conf
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.used
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.peak
2017-04-12 16:43:15,053 [main] INFO o.a.drill.common.config.DrillConfig -
Configuration and plugin file(s) identified in 50ms.
Base Configuration:
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-default.conf
Intermediate Configuration and Plugin files, in order of precedence:
- jar:file:/opt/drill/jars/drill-java-exec-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hive-core-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-memory-base-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-mongo-storage-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-jdbc-storage-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-logical-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hbase-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-gis-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-kudu-storage-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-hive-exec-shaded-1.10.0.jar!/drill-module.conf
Override File: file:/opt/drill/conf/drill-override.conf
2017-04-12 16:43:15,063 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.used
2017-04-12 16:43:15,064 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.peak
2017-04-12 16:43:15,299 [main] ERROR o.a.drill.exec.client.DrillClient -
Connection to host1.fqdn:31010 failed with error
javax.security.sasl.SaslException: Authentication failed: Server requires
authentication using [kerberos, plain]. Insufficient credentials? [Caused by
javax.security.sasl.SaslException: Server requires authentication using
[kerberos, plain]. Insufficient credentials?]. Not retrying anymore
{code}
was (Author: pd47):
I do not see any error in drillbit.log:
{code}
2017-04-12 16:42:49,549 [main] INFO o.a.drill.exec.server.rest.WebServer -
Setting up HTTP connector for web server
2017-04-12 16:42:50,936 [main] INFO o.apache.drill.exec.server.Drillbit -
Startup completed (5728 ms).
{code}
However I do see this error in sqlline.log:
{code}
Override File: file:/opt/drill/conf/drill-override.conf
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.used
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.peak
2017-04-12 16:43:15,053 [main] INFO o.a.drill.common.config.DrillConfig -
Configuration and plugin file(s) identified in 50ms.
Base Configuration:
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-default.conf
Intermediate Configuration and Plugin files, in order of precedence:
- jar:file:/opt/drill/jars/drill-java-exec-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hive-core-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-memory-base-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-mongo-storage-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-jdbc-storage-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-logical-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hbase-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-gis-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-kudu-storage-1.10.0.jar!/drill-module.conf
-
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971752#comment-15971752
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 11:15 PM:
--
I set the JAVA_HOME in drill-env.sh and getting kerberos error.
{code}
drill@:/home/drill> echo $JAVA_HOME
/usr/java/jdk1.7.0_80
drill@:/home/drill> grep JAVA_HOME /opt/drill/conf/drill-env.sh
export JAVA_HOME="/usr/java/jdk1.7.0_80"
drill@:/home/drill> ls -ld /usr/java/jdk1.7.0_80
drwxr-xr-x 8 root root 4096 Apr 17 15:35 /usr/java/jdk1.7.0_80
drill@:/home/drill> klist
Ticket cache: FILE:/tmp/krb5cc_5005
Default principal: drill/host1.f...@lab.com
Valid starting ExpiresService principal
04/17/17 18:21:00 04/18/17 18:21:00 krbtgt/lab@lab.com
renew until 04/17/17 18:21:00
drill@:/home/drill> sqlline -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos"
Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
... 18 more
Caused by: javax.security.sasl.SaslException: Authentication failed
unexpectedly. [Caused by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:207)
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
at
com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85)
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:155)
... 21 more
Caused by: java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]
at
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971799#comment-15971799
]
Parag Darji commented on DRILL-5433:
Me to (:
{code}
drill@:/opt/drill/conf> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>>>KinitOptions cache name is /tmp/krb5cc_5005
>>>DEBUG client principal is drill/host1.f...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Mon Apr 17 18:21:00 EDT 2017
>>>DEBUG start time: Mon Apr 17 18:21:00 EDT 2017
>>>DEBUG end time: Tue Apr 18 18:21:00 EDT 2017
>>>DEBUG renew_till time: Mon Apr 17 18:21:00 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is drill/host1.f...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
>>> unsupported key type found the default TGT: 18
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
... 18 more
Caused by: javax.security.sasl.SaslException: Authentication failed
unexpectedly. [Caused by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:207)
at
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971752#comment-15971752
]
Parag Darji commented on DRILL-5433:
I set the JAVA_HOME in drill-env.sh and getting kerberos error.
{code}
drill@:/home/drill> echo $JAVA_HOME
/usr/java/jdk1.7.0_80
drill@:/home/drill> grep JAVA_HOME /opt/drill/conf/drill-env.sh
export JAVA_HOME="/usr/java/jdk1.7.0_80"
drill@:/home/drill> ls -ld /usr/java/jdk1.7.0_80
drwxr-xr-x 8 root root 4096 Apr 17 15:35 /usr/java/jdk1.7.0_80
drill@:/home/drill> klist
Ticket cache: FILE:/tmp/krb5cc_5005
Default principal: drill/altbthdlhdpsb01.cscdev@lab.com
Valid starting ExpiresService principal
04/17/17 18:21:00 04/18/17 18:21:00 krbtgt/lab@lab.com
renew until 04/17/17 18:21:00
drill@:/home/drill> sqlline -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos"
Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
... 18 more
Caused by: javax.security.sasl.SaslException: Authentication failed
unexpectedly. [Caused by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]]
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:207)
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
at
com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85)
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:155)
... 21 more
Caused by: java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Failed to find any Kerberos tgt)]
at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971571#comment-15971571
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 8:42 PM:
-
I set the JAVA_HOME variable in "drill-env.sh" and drill users profile too.
It's still throwing JDK/JRE error.
export JAVA_HOME="/usr/lib/jvm/jre-1.7.0-openjdk.x86_64"
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=>
{code}
was (Author: pd47):
Still throwing JDK/JRE error.
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=>
{code}
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971571#comment-15971571
]
Parag Darji edited comment on DRILL-5433 at 4/17/17 8:05 PM:
-
Still throwing JDK/JRE error.
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=>
{code}
was (Author: pd47):
Still throwing JDK/JRE error.
{code}
0: jdbc:drill:drillbit=host1.fqdn> set `exec.java_compiler` = 'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev>
{code}
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed:
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971571#comment-15971571
]
Parag Darji commented on DRILL-5433:
Still throwing JDK/JRE error.
{code}
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev> set `exec.java_compiler` =
'JANINO';
+---+--+
| ok | summary|
+---+--+
| true | exec.java_compiler updated. |
+---+--+
1 row selected (1.067 seconds)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev> show databases;
Error: SYSTEM ERROR: RuntimeException: JDK Java compiler not available -
probably you're running Drill with a JRE and not a JDK
Fragment 0:0
[Error Id: 585448e7-2e1d-4cbf-91c1-e53c82ccbdda on
altbthdlhdpsb01.cscdev.com:31010] (state=,code=0)
0: jdbc:drill:drillbit=altbthdlhdpsb01.cscdev>
{code}
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971535#comment-15971535
]
Parag Darji commented on DRILL-5433:
Looks like I'm using JRE java.
{code}
:/usr/lib/jvm # ls -ltr | grep 1.7
drwxr-xr-x. 3 root root 4096 Jan 18 19:43 java-1.7.0-openjdk-1.7.0.79.x86_64
lrwxrwxrwx. 1 root root 38 Jan 18 19:43 jre-1.7.0-openjdk.x86_64 ->
java-1.7.0-openjdk-1.7.0.79.x86_64/jre
lrwxrwxrwx. 1 root root 27 Jan 18 19:43 jre-1.7.0 ->
/etc/alternatives/jre_1.7.0
:/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.79.x86_64/jre/bin # ./java -version
java version "1.7.0_79"
OpenJDK Runtime Environment (rhel-2.5.5.4.el6-x86_64 u79-b14)
OpenJDK 64-Bit Server VM (build 24.79-b02, mixed mode)
{code}
Let me know if you see anything else that could be causing the issue or it's
Java.
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15971500#comment-15971500
]
Parag Darji commented on DRILL-5433:
Before I was using single principal per cluster(drill/lab...@lab.com), now I
created principal per node (drill/host1.f...@lab.com).
Updated the drill-override.conf:
{code}
auth.principal:"drill/_h...@lab.com",
{code}
Now I'm seeing different error (for both users "test" and "drill").
{code}
test@:/home/test> test@altbthdlhdpsb01:/home/test> klist
Ticket cache: FILE:/tmp/krb5cc_5007
Default principal: test/lab...@lab.com
Valid starting ExpiresService principal
04/13/17 15:00:25 04/14/17 15:00:25 krbtgt/lab@lab.com
renew until 04/13/17 15:00:25
test@:/home/test> sqlline -u "jdbc:drill:zk=host1.fqdn;auth=kerberos"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5007
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Mon Apr 17 14:38:45 EDT 2017
>>>DEBUG start time: Mon Apr 17 14:38:45 EDT 2017
>>>DEBUG end time: Tue Apr 18 14:38:45 EDT 2017
>>>DEBUG renew_till time: Mon Apr 17 14:38:45 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Tue Apr 18 14:38:45 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Tue Apr 18 14:38:45 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=host1.fqdn UDP:88, timeout=3, number of retries =3,
>>> #bytes=679
>>> KDCCommunication: kdc=host1.fqdn UDP:88, timeout=3,Attempt =1, #bytes=679
>>> KrbKdcReq send: #bytes read=675
>>> KdcAccessibility: remove host1.fqdn
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KrbApReq: APOptions are
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
Krb5Context setting mySeqNumber to: 893845010
Krb5Context setting peerSeqNumber to: 0
Created InitSecContextToken:
: 01 00 6E 82 02 52 30 82 02 4E A0 03 02 01 05 A1 ..n..R0..N..
0010: 03 02 01 0E A2 07 03 05 00 00 00 00 00 A3 82 01
0020: 63 61 82 01 5F 30 82 01 5B A0 03 02 01 05 A1 09 ca.._0..[...
0030: 1B 07 4C 41 42 2E 43 4F 4D A2 2E 30 2C A0 03 02 ..LAB.COM..0,...
0040: 01 00 A1 25 30 23 1B 05 64 72 69 6C 6C 1B 1A 61 ...%0#..drill..a
0050: 6C 74 62 74 68 64 6C 68 64 70 73 62 30 31 2E 63 ltbthdlhdpsb01.c
0060: 73 63 64 65 76 2E 63 6F 6D A3 82 01 17 30 82 01 scdev.com0..
0070: 13 A0 03 02 01 12 A1 03 02 01 02 A2 82 01 05 04
0080: 82 01 01 FA F8 F6 F2 4E F4 FF 07 2C E7 5D B2 85 ...N...,.]..
0090: 0F E1 03 E4 AE 65 E0 81 6F 23 EB 70 DC D2 24 7A .e..o#.p..$z
00A0: 0A 54 5C E8 44 E7 67 80 D8 E6 8C DC AC 09 7F F3 .T\.D.g.
00B0: CB CE 0D 1A CC 82 05 D4 9E DE 2E E6 53 7B B8 E5 S...
00C0: AF F4 5F B7 59 54 F2 70 9A EC 0C E1 EB 65 79 5A .._.YT.p.eyZ
00D0: 68 F7 97 B6 2F F8 DF 0A 0A 79 E9 0A 1B 23 4B 93 h.../y...#K.
00E0: 6C 53 F4 85 A3 45 5C B9 19 4C 2B DB 29 3D 13 41 lS...E\..L+.)=.A
00F0: D3 50 1F 08 60 FC A2 23 89 91 A4 3B 5C 01 F5 A5 .P..`..#...;\...
0100: E0 12 55 00 D1 A0 77 AB 34 4A 97 42 68 C5 89 9A ..U...w.4J.Bh...
0110: 38 29 75 5A FE 77 D8 E3 9F 07 DB 82 9B 73 97 BA 8)uZ.w...s..
0120: 05 84 7B 74 71 BC A4 BD B0 12 74 99 B3 88 E5 02 ...tq.t.
0130: 3A 49 BF 93 12 06 C6 10 83 B0 4E B3 CF D5 DE 2F :IN/
0140: 82 19 54 4B 64 21 AA 24 DE E5 59 7B E5 5F 00 37 ..TKd!.$..Y.._.7
0150: AA 61 16 5E 04 30 0C 53 40 DD 3F D6 A1 D6 80 E7 .a.^.0.S@.?.
0160: F9 F4 37 2F 2F 1A B3 51 2D 83 0E 3D 3E AF CB 49 ..7//..Q-..=>..I
0170: 9A 4D 01 90 64 FB 50 DC 8A AB 02 86 20 56 0E
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15969309#comment-15969309
]
Parag Darji edited comment on DRILL-5433 at 4/15/17 2:19 PM:
-
One thing I noticed that "hive.metastore.sasl.enabled" is set to "true" in
hive-site.xml. This is required as we have kerberos enabled.
When I try to set "hive.metastore.sasl.enabled" to "true" in Drill UI -->
Storage --> Hive configuration, it's throwing error: "Please retry: error
(unable to create/ update storage)".
Was Drill tested on Hortonworks Kerberos environment?
was (Author: pd47):
One thing I noticed that "hive.metastore.sasl.enabled" is set to "true" in
hive-site.xml and it's set to "false" in Drill UI --> Storage --> Hive
configuration.
If I try to it to change it to "true" in UI and update it, it's throwing
"Please retry: error (unable to create/ update storage)".
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos,
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15969309#comment-15969309
]
Parag Darji edited comment on DRILL-5433 at 4/14/17 5:39 PM:
-
One thing I noticed that "hive.metastore.sasl.enabled" is set to "true" in
hive-site.xml and it's set to "false" in Drill UI --> Storage --> Hive
configuration.
If I try to it to change it to "true" in UI and update it, it's throwing
"Please retry: error (unable to create/ update storage)".
was (Author: pd47):
One thing I noticed that is {code} "hive.metastore.sasl.enabled=true" {code} in
hive-site.xml and it's set to "false" in Drill UI --> Storage --> Hive
configuration.
If I try to it to change it to "true" in UI and update, it's throwing "Please
retry: error (unable to create/ update storage)".
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException:
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15969309#comment-15969309
]
Parag Darji edited comment on DRILL-5433 at 4/14/17 5:38 PM:
-
One thing I noticed that is {code} "hive.metastore.sasl.enabled=true" {code} in
hive-site.xml and it's set to "false" in Drill UI --> Storage --> Hive
configuration.
If I try to it to change it to "true" in UI and update, it's throwing "Please
retry: error (unable to create/ update storage)".
was (Author: pd47):
One thing I noticed that is "hive.metastore.sasl.enabled=true" in hive-site.xml
and it's set to "false" in Drill UI --> Storage --> Hive configuration.
If I try to it to change it to "true" in UI and update, it's throwing "Please
retry: error (unable to create/ update storage)".
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server requires
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15969309#comment-15969309
]
Parag Darji commented on DRILL-5433:
One thing I noticed that is "hive.metastore.sasl.enabled=true" in hive-site.xml
and it's set to "false" in Drill UI --> Storage --> Hive configuration.
If I try to it to "true" in UI and update, it's throwing "Please retry: error
(unable to create/ update storage)".
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server requires authentication
> using [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:204)
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
> at
> com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85)
>
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15969309#comment-15969309
]
Parag Darji edited comment on DRILL-5433 at 4/14/17 5:37 PM:
-
One thing I noticed that is "hive.metastore.sasl.enabled=true" in hive-site.xml
and it's set to "false" in Drill UI --> Storage --> Hive configuration.
If I try to it to change it to "true" in UI and update, it's throwing "Please
retry: error (unable to create/ update storage)".
was (Author: pd47):
One thing I noticed that is "hive.metastore.sasl.enabled=true" in hive-site.xml
and it's set to "false" in Drill UI --> Storage --> Hive configuration.
If I try to it to "true" in UI and update, it's throwing "Please retry: error
(unable to create/ update storage)".
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server requires authentication
> using
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15969055#comment-15969055
]
Parag Darji commented on DRILL-5433:
Here is the hive-site.xml file:
{code}
ambari.hive.db.schema.name =hive
atlas.hook.hive.maxThreads =1
atlas.hook.hive.minThreads =1
datanucleus.autoCreateSchema = FALSE
datanucleus.cache.level2.type = none
datanucleus.fixedDatastore =TRUE
hive.auto.convert.join =TRUE
hive.auto.convert.join.noconditionaltask = TRUE
hive.auto.convert.join.noconditionaltask.size = 572662306
hive.auto.convert.sortmerge.join = TRUE
hive.auto.convert.sortmerge.join.to.mapjoin = FALSE
hive.cbo.enable = TRUE
hive.cli.print.header = FALSE
hive.cluster.delegation.token.store.class =
org.apache.hadoop.hive.thrift.ZooKeeperTokenStore
hive.cluster.delegation.token.store.zookeeper.connectString =
host02.fqdn:2181,host01.fqdn:2181,host03.fqdn:2181
hive.cluster.delegation.token.store.zookeeper.znode = /hive/cluster/delegation
hive.compactor.abortedtxn.threshold = 1000
hive.compactor.check.interval = 300L
hive.compactor.delta.num.threshold =10
hive.compactor.delta.pct.threshold =0.1f
hive.compactor.initiator.on = FALSE
hive.compactor.worker.threads = 0
hive.compactor.worker.timeout = 86400L
hive.compute.query.using.stats =TRUE
hive.conf.restricted.list =
hive.security.authenticator.manager,hive.security.authorization.manager,hive.users.in.admin.role
hive.convert.join.bucket.mapjoin.tez = FALSE
hive.default.fileformat = TextFile
hive.default.fileformat.managed = TextFile
hive.enforce.bucketing =FALSE
hive.enforce.sorting = TRUE
hive.enforce.sortmergebucketmapjoin = TRUE
hive.exec.compress.intermediate = FALSE
hive.exec.compress.output = FALSE
hive.exec.dynamic.partition = TRUE
hive.exec.dynamic.partition.mode = strict
hive.exec.failure.hooks = org.apache.hadoop.hive.ql.hooks.ATSHook
hive.exec.max.created.files = 10
hive.exec.max.dynamic.partitions = 5000
hive.exec.max.dynamic.partitions.pernode = 2000
hive.exec.orc.compression.strategy =SPEED
hive.exec.orc.default.compress =ZLIB
hive.exec.orc.default.stripe.size = 67108864
hive.exec.orc.encoding.strategy = SPEED
hive.exec.parallel =FALSE
hive.exec.parallel.thread.number = 8
hive.exec.post.hooks = org.apache.hadoop.hive.ql.hooks.ATSHook
hive.exec.pre.hooks = org.apache.hadoop.hive.ql.hooks.ATSHook
hive.exec.reducers.bytes.per.reducer = 67108864
hive.exec.reducers.max =1009
hive.exec.scratchdir = /tmp/hive
hive.exec.submit.local.task.via.child = TRUE
hive.exec.submitviachild = FALSE
hive.execution.engine = tez
hive.fetch.task.aggr = FALSE
hive.fetch.task.conversion =more
hive.fetch.task.conversion.threshold = 1073741824
hive.limit.optimize.enable =TRUE
hive.limit.pushdown.memory.usage = 0.04
hive.map.aggr = TRUE
hive.map.aggr.hash.force.flush.memory.threshold = 0.9
hive.map.aggr.hash.min.reduction = 0.5
hive.map.aggr.hash.percentmemory = 0.5
hive.mapjoin.bucket.cache.size =1
hive.mapjoin.optimized.hashtable = TRUE
hive.mapred.reduce.tasks.speculative.execution =FALSE
hive.merge.mapfiles = TRUE
hive.merge.mapredfiles =FALSE
hive.merge.orcfile.stripe.level = TRUE
hive.merge.rcfile.block.level = TRUE
hive.merge.size.per.task = 25600
hive.merge.smallfiles.avgsize = 1600
hive.merge.tezfiles = FALSE
hive.metastore.authorization.storage.checks = FALSE
hive.metastore.cache.pinobjtypes = Table,Database,Type,FieldSchema,Order
hive.metastore.client.connect.retry.delay = 5s
hive.metastore.client.socket.timeout = 1800s
hive.metastore.connect.retries =24
hive.metastore.execute.setugi = TRUE
hive.metastore.failure.retries =24
hive.metastore.kerberos.keytab.file =
/etc/security/keytabs/hive.service.keytab
hive.metastore.kerberos.principal = hive/_h...@lab.com
hive.metastore.pre.event.listeners =
org.apache.hadoop.hive.ql.security.authorization.AuthorizationPreEventListener
hive.metastore.sasl.enabled = TRUE
hive.metastore.server.max.threads = 10
hive.metastore.uris = thrift://host02.fqdn:9083
hive.metastore.warehouse.dir = /apps/hive/warehouse
hive.optimize.bucketmapjoin = TRUE
hive.optimize.bucketmapjoin.sortedmerge = FALSE
hive.optimize.constant.propagation =TRUE
hive.optimize.index.filter =TRUE
hive.optimize.metadataonly =TRUE
hive.optimize.null.scan = TRUE
hive.optimize.reducededuplication = TRUE
hive.optimize.reducededuplication.min.reducer = 4
hive.optimize.sort.dynamic.partition = FALSE
hive.orc.compute.splits.num.threads = 10
hive.orc.splits.include.file.footer = FALSE
hive.prewarm.enabled = FALSE
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968262#comment-15968262
]
Parag Darji commented on DRILL-5433:
Yes all hadoop services are running fine (hdfs yarn hive hbase Kafka storm and
more).
But none of them are running as user "drill".
Drill is just not working with kerberos (or the way we are passing the
parameters in the sqlline command).
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server requires authentication
> using [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:204)
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
> at
> com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85)
> at
>
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968166#comment-15968166
]
Parag Darji commented on DRILL-5433:
Permission seems to be correct. Please correct me if I'm wrong, if there was
permission issue drillbit won't start and/or kinit for dirll id would have
error'ed.
I tried to move the drill.keytab file from /opt/drill into "drill" user's home
dir and still failing.
{code}
drill@:/home/drill/.keytab> ls -ld /home/drill/.keytab
drwx-- 2 drill drill 4096 Apr 6 16:28 /home/drill/.keytab
drill@:/home/drill/.keytab> ls -ld /home/drill/.keytab/drill.keytab
-rwx-- 1 drill drill 262 Apr 6 16:28 /home/drill/.keytab/drill.keytab
{code}
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server requires authentication
> using [kerberos, plain]. Insufficient credentials?]
> at
>
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968136#comment-15968136
]
Parag Darji edited comment on DRILL-5433 at 4/13/17 7:49 PM:
-
I will look into scenario 1 permission.
Sorry I forgot to do the klist for test user.
{code}
host1:/var/log/ambari-server # su - test
test@:/home/test> klist
Ticket cache: FILE:/tmp/krb5cc_5007
Default principal: test/lab...@lab.com
Valid starting ExpiresService principal
04/13/17 15:00:25 04/14/17 15:00:25 krbtgt/lab@lab.com
renew until 04/13/17 15:00:25
test@:/home/test> clear
test@:/home/test> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5007
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG start time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG end time: Fri Apr 14 15:00:25 EDT 2017
>>>DEBUG renew_till time: Thu Apr 13 15:00:25 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=altbthdlhdpsb01.cscdev.com UDP:88, timeout=3, number of
>>> retries =3, #bytes=659
>>> KDCCommunication: kdc=altbthdlhdpsb01.cscdev.com UDP:88, timeout=3,Attempt
>>> =1, #bytes=659
>>> KrbKdcReq send: #bytes read=161
>>> KdcAccessibility: remove altbthdlhdpsb01.cscdev.com
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Thu Aug 19 05:00:10 EDT 1982 39859561
sTime is Thu Apr 13 15:46:13 EDT 2017 1492112773000
suSec is 302285
error code is 7
error Message is Server not found in Kerberos database
crealm is LAB.COM
cname is test/labhdp
realm is LAB.COM
sname is drill/ladhdp
msgType is 30
KrbException: Server not found in Kerberos database (7) - UNKNOWN_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:309)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:454)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:231)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:228)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.evaluateChallenge(AuthenticationOutcomeListener.java:228)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.initiate(AuthenticationOutcomeListener.java:89)
at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968136#comment-15968136
]
Parag Darji edited comment on DRILL-5433 at 4/13/17 7:48 PM:
-
I will look into scenario 1 permission.
Sorry I forgot to do the klist for test user.
{code}
host1:/var/log/ambari-server # su - test
test@:/home/test> klist
Ticket cache: FILE:/tmp/krb5cc_5007
Default principal: test/lab...@lab.com
Valid starting ExpiresService principal
04/13/17 15:00:25 04/14/17 15:00:25 krbtgt/lab@lab.com
renew until 04/13/17 15:00:25
test@:/home/test> clear
test@:/home/test> sqlline -u
"jdbc:drill:drillbit=altbthdlhdpsb01.cscdev.com;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5007
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG start time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG end time: Fri Apr 14 15:00:25 EDT 2017
>>>DEBUG renew_till time: Thu Apr 13 15:00:25 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=altbthdlhdpsb01.cscdev.com UDP:88, timeout=3, number of
>>> retries =3, #bytes=659
>>> KDCCommunication: kdc=altbthdlhdpsb01.cscdev.com UDP:88, timeout=3,Attempt
>>> =1, #bytes=659
>>> KrbKdcReq send: #bytes read=161
>>> KdcAccessibility: remove altbthdlhdpsb01.cscdev.com
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Thu Aug 19 05:00:10 EDT 1982 39859561
sTime is Thu Apr 13 15:46:13 EDT 2017 1492112773000
suSec is 302285
error code is 7
error Message is Server not found in Kerberos database
crealm is LAB.COM
cname is test/labhdp
realm is LAB.COM
sname is drill/ladhdp
msgType is 30
KrbException: Server not found in Kerberos database (7) - UNKNOWN_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:309)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:454)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:231)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:228)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.evaluateChallenge(AuthenticationOutcomeListener.java:228)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.initiate(AuthenticationOutcomeListener.java:89)
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968136#comment-15968136
]
Parag Darji commented on DRILL-5433:
I will look into scenario 1 permission.
Sorry I forgot to do the klist for test user.
{code}
altbthdlhdpsb01:/var/log/ambari-server # su - test
test@altbthdlhdpsb01:/home/test> klist
Ticket cache: FILE:/tmp/krb5cc_5007
Default principal: test/lab...@lab.com
Valid starting ExpiresService principal
04/13/17 15:00:25 04/14/17 15:00:25 krbtgt/lab@lab.com
renew until 04/13/17 15:00:25
test@altbthdlhdpsb01:/home/test> clear
test@altbthdlhdpsb01:/home/test> sqlline -u
"jdbc:drill:drillbit=altbthdlhdpsb01.cscdev.com;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5007
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG start time: Thu Apr 13 15:00:25 EDT 2017
>>>DEBUG end time: Fri Apr 14 15:00:25 EDT 2017
>>>DEBUG renew_till time: Thu Apr 13 15:00:25 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is test/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for test/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Fri Apr 14 15:00:25 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=altbthdlhdpsb01.cscdev.com UDP:88, timeout=3, number of
>>> retries =3, #bytes=659
>>> KDCCommunication: kdc=altbthdlhdpsb01.cscdev.com UDP:88, timeout=3,Attempt
>>> =1, #bytes=659
>>> KrbKdcReq send: #bytes read=161
>>> KdcAccessibility: remove altbthdlhdpsb01.cscdev.com
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Thu Aug 19 05:00:10 EDT 1982 39859561
sTime is Thu Apr 13 15:46:13 EDT 2017 1492112773000
suSec is 302285
error code is 7
error Message is Server not found in Kerberos database
crealm is LAB.COM
cname is test/labhdp
realm is LAB.COM
sname is drill/ladhdp
msgType is 30
KrbException: Server not found in Kerberos database (7) - UNKNOWN_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:309)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:454)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:231)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:228)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.evaluateChallenge(AuthenticationOutcomeListener.java:228)
at
[jira] [Issue Comment Deleted] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Parag Darji updated DRILL-5433:
---
Comment: was deleted
(was: I will check on scenario 1.
Sorry I forgot to kinit for option 2:
{code}
test@host1:/home/test> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Error: Failure in connecting to Drill: org.apache.drill.exec.rpc.RpcException:
CONNECTION : java.nio.channels.UnresolvedAddressException (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.RpcException: CONNECTION :
java.nio.channels.UnresolvedAddressException
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.RpcException: CONNECTION :
java.nio.channels.UnresolvedAddressException
at
org.apache.drill.exec.rpc.user.UserClient$2.connectionFailed(UserClient.java:181)
at
org.apache.drill.exec.rpc.user.QueryResultHandler$ChannelClosedHandler.connectionFailed(QueryResultHandler.java:389)
at
org.apache.drill.exec.rpc.BasicClient$ConnectionMultiListener$ConnectionHandler.operationComplete(BasicClient.java:249)
at
org.apache.drill.exec.rpc.BasicClient$ConnectionMultiListener$ConnectionHandler.operationComplete(BasicClient.java:212)
at
io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:680)
at
io.netty.util.concurrent.DefaultPromise.notifyListeners(DefaultPromise.java:567)
at
io.netty.util.concurrent.DefaultPromise.tryFailure(DefaultPromise.java:424)
at
io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.connect(AbstractNioChannel.java:235)
at
io.netty.channel.DefaultChannelPipeline$HeadContext.connect(DefaultChannelPipeline.java:1089)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.ChannelOutboundHandlerAdapter.connect(ChannelOutboundHandlerAdapter.java:47)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.ChannelDuplexHandler.connect(ChannelDuplexHandler.java:50)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:510)
at
io.netty.channel.DefaultChannelPipeline.connect(DefaultChannelPipeline.java:909)
at io.netty.channel.AbstractChannel.connect(AbstractChannel.java:203)
at io.netty.bootstrap.Bootstrap$2.run(Bootstrap.java:165)
at
io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:357)
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:357)
at
io.netty.util.concurrent.SingleThreadEventExecutor$2.run(SingleThreadEventExecutor.java:111)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.util.concurrent.ExecutionException:
java.nio.channels.UnresolvedAddressException
at io.netty.util.concurrent.AbstractFuture.get(AbstractFuture.java:47)
at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968084#comment-15968084
]
Parag Darji edited comment on DRILL-5433 at 4/13/17 7:35 PM:
-
I will check on scenario 1.
Sorry I forgot to kinit for option 2:
{code}
test@host1:/home/test> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Error: Failure in connecting to Drill: org.apache.drill.exec.rpc.RpcException:
CONNECTION : java.nio.channels.UnresolvedAddressException (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.RpcException: CONNECTION :
java.nio.channels.UnresolvedAddressException
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.RpcException: CONNECTION :
java.nio.channels.UnresolvedAddressException
at
org.apache.drill.exec.rpc.user.UserClient$2.connectionFailed(UserClient.java:181)
at
org.apache.drill.exec.rpc.user.QueryResultHandler$ChannelClosedHandler.connectionFailed(QueryResultHandler.java:389)
at
org.apache.drill.exec.rpc.BasicClient$ConnectionMultiListener$ConnectionHandler.operationComplete(BasicClient.java:249)
at
org.apache.drill.exec.rpc.BasicClient$ConnectionMultiListener$ConnectionHandler.operationComplete(BasicClient.java:212)
at
io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:680)
at
io.netty.util.concurrent.DefaultPromise.notifyListeners(DefaultPromise.java:567)
at
io.netty.util.concurrent.DefaultPromise.tryFailure(DefaultPromise.java:424)
at
io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.connect(AbstractNioChannel.java:235)
at
io.netty.channel.DefaultChannelPipeline$HeadContext.connect(DefaultChannelPipeline.java:1089)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.ChannelOutboundHandlerAdapter.connect(ChannelOutboundHandlerAdapter.java:47)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.ChannelDuplexHandler.connect(ChannelDuplexHandler.java:50)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:510)
at
io.netty.channel.DefaultChannelPipeline.connect(DefaultChannelPipeline.java:909)
at io.netty.channel.AbstractChannel.connect(AbstractChannel.java:203)
at io.netty.bootstrap.Bootstrap$2.run(Bootstrap.java:165)
at
io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:357)
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:357)
at
io.netty.util.concurrent.SingleThreadEventExecutor$2.run(SingleThreadEventExecutor.java:111)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.util.concurrent.ExecutionException:
java.nio.channels.UnresolvedAddressException
at
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15968084#comment-15968084
]
Parag Darji commented on DRILL-5433:
I will check on scenario 1.
Sorry I forgot to kinit for option 2:
{code}
test@altbthdlhdpsb01:/home/test> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Error: Failure in connecting to Drill: org.apache.drill.exec.rpc.RpcException:
CONNECTION : java.nio.channels.UnresolvedAddressException (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.RpcException: CONNECTION :
java.nio.channels.UnresolvedAddressException
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.RpcException: CONNECTION :
java.nio.channels.UnresolvedAddressException
at
org.apache.drill.exec.rpc.user.UserClient$2.connectionFailed(UserClient.java:181)
at
org.apache.drill.exec.rpc.user.QueryResultHandler$ChannelClosedHandler.connectionFailed(QueryResultHandler.java:389)
at
org.apache.drill.exec.rpc.BasicClient$ConnectionMultiListener$ConnectionHandler.operationComplete(BasicClient.java:249)
at
org.apache.drill.exec.rpc.BasicClient$ConnectionMultiListener$ConnectionHandler.operationComplete(BasicClient.java:212)
at
io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:680)
at
io.netty.util.concurrent.DefaultPromise.notifyListeners(DefaultPromise.java:567)
at
io.netty.util.concurrent.DefaultPromise.tryFailure(DefaultPromise.java:424)
at
io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.connect(AbstractNioChannel.java:235)
at
io.netty.channel.DefaultChannelPipeline$HeadContext.connect(DefaultChannelPipeline.java:1089)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.ChannelOutboundHandlerAdapter.connect(ChannelOutboundHandlerAdapter.java:47)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.ChannelDuplexHandler.connect(ChannelDuplexHandler.java:50)
at
io.netty.channel.AbstractChannelHandlerContext.invokeConnect(AbstractChannelHandlerContext.java:543)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:528)
at
io.netty.channel.AbstractChannelHandlerContext.connect(AbstractChannelHandlerContext.java:510)
at
io.netty.channel.DefaultChannelPipeline.connect(DefaultChannelPipeline.java:909)
at io.netty.channel.AbstractChannel.connect(AbstractChannel.java:203)
at io.netty.bootstrap.Bootstrap$2.run(Bootstrap.java:165)
at
io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:357)
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:357)
at
io.netty.util.concurrent.SingleThreadEventExecutor$2.run(SingleThreadEventExecutor.java:111)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.util.concurrent.ExecutionException:
java.nio.channels.UnresolvedAddressException
at io.netty.util.concurrent.AbstractFuture.get(AbstractFuture.java:47)
at
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15967950#comment-15967950
]
Parag Darji commented on DRILL-5433:
I've tried both ways, seems to be the same error:
{code}
drill@host1:/home/drill> sqlline -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com;keytab=/opt/drill/.keytab/drill.keytab"
-n "drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>>> KdcAccessibility: reset
>>> KdcAccessibility: reset
>>> KeyTabInputStream, readName(): LAB.COM
>>> KeyTabInputStream, readName(): drill
>>> KeyTabInputStream, readName(): labhdp
>>> KeyTab: load() entry length: 71; type: 18
>>> KeyTabInputStream, readName(): LAB.COM
>>> KeyTabInputStream, readName(): drill
>>> KeyTabInputStream, readName(): labhdp
>>> KeyTab: load() entry length: 55; type: 17
>>> KeyTabInputStream, readName(): LAB.COM
>>> KeyTabInputStream, readName(): drill
>>> KeyTabInputStream, readName(): labhdp
>>> KeyTab: load() entry length: 63; type: 16
>>> KeyTabInputStream, readName(): LAB.COM
>>> KeyTabInputStream, readName(): drill
>>> KeyTabInputStream, readName(): labhdp
>>> KeyTab: load() entry length: 55; type: 23
Ordering keys wrt default_tkt_enctypes list
Using builtin default etypes for default_tkt_enctypes
default etypes for default_tkt_enctypes: 18 17 16 23 1 3.
Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException: javax.security.sasl.SaslException:
Failed to login. [Caused by javax.security.auth.login.LoginException: Unable to
obtain password from user
]] (state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException: javax.security.sasl.SaslException:
Failed to login. [Caused by javax.security.auth.login.LoginException: Unable to
obtain password from user
]]
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException: javax.security.sasl.SaslException:
Failed to login. [Caused by javax.security.auth.login.LoginException: Unable to
obtain password from user
]]
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
... 18 more
Caused by: javax.security.sasl.SaslException: Authentication failed
unexpectedly. [Caused by java.util.concurrent.ExecutionException:
javax.security.sasl.SaslException: Failed to login. [Caused by
javax.security.auth.login.LoginException: Unable to obtain password from user
]]
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:207)
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
at
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15967883#comment-15967883
]
Parag Darji commented on DRILL-5433:
Do mean log in as user "test" and run below commnad?
{code}
sqlline --maxWidth=1 -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=test/lad...@lab.com;keytab:/home/test/test.keytab"
{code}
> Authentication failed: Server requires authentication using [kerberos, plain]
> -
>
> Key: DRILL-5433
> URL: https://issues.apache.org/jira/browse/DRILL-5433
> Project: Apache Drill
> Issue Type: Task
> Components: Functions - Drill
>Affects Versions: 1.10.0
> Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled,
> Hardware: VmWare
>Reporter: Parag Darji
>Priority: Minor
> Labels: newbie, security
> Fix For: 1.10.0
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled
> I'm getting below error while running "drill-conf" or sqlline as user "drill"
> which is configured in the "drill-override.conf" file.
> {code}
> drill@host:/opt/drill/bin> drill-conf
> Error: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?] (state=,code=0)
> java.sql.SQLException: Failure in connecting to Drill:
> org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
> at
> org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
> at
> org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
> at
> org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
> at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
> at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
> at
> sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
> at sqlline.Commands.connect(Commands.java:1083)
> at sqlline.Commands.connect(Commands.java:1015)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
> at sqlline.SqlLine.dispatch(SqlLine.java:742)
> at sqlline.SqlLine.initArgs(SqlLine.java:528)
> at sqlline.SqlLine.begin(SqlLine.java:596)
> at sqlline.SqlLine.start(SqlLine.java:375)
> at sqlline.SqlLine.main(SqlLine.java:268)
> Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
> javax.security.sasl.SaslException: Authentication failed: Server requires
> authentication using [kerberos, plain]. Insufficient credentials? [Caused by
> javax.security.sasl.SaslException: Server requires authentication using
> [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
> at
> org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
> at
> org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
> ... 18 more
> Caused by: javax.security.sasl.SaslException: Authentication failed: Server
> requires authentication using [kerberos, plain]. Insufficient credentials?
> [Caused by javax.security.sasl.SaslException: Server requires authentication
> using [kerberos, plain]. Insufficient credentials?]
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:204)
> at
> org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
> at
> com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85)
> at
>
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15967664#comment-15967664
]
Parag Darji edited comment on DRILL-5433 at 4/13/17 2:42 PM:
-
Here is the output after enabling extended logging:
{code}
drill@:/var/log> klist
Ticket cache: FILE:/tmp/krb5cc_5005
Default principal: drill/lab...@lab.com
Valid starting ExpiresService principal
04/12/17 16:41:00 04/13/17 16:41:00 krbtgt/lab@lab.com
renew until 04/12/17 16:41:00
drill@:/home/drill> sqlline --maxWidth=1 -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5005
>>>DEBUG client principal is drill/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Wed Apr 12 16:41:00 EDT 2017
>>>DEBUG start time: Wed Apr 12 16:41:00 EDT 2017
>>>DEBUG end time: Thu Apr 13 16:41:00 EDT 2017
>>>DEBUG renew_till time: Wed Apr 12 16:41:00 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is drill/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for drill/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Thu Apr 13 16:41:00 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for drill/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Thu Apr 13 16:41:00 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=host1.fqdn UDP:88, timeout=3, number of retries =3,
>>> #bytes=661
>>> KDCCommunication: kdc=host1.fqdn UDP:88, timeout=3,Attempt =1, #bytes=661
>>> KrbKdcReq send: #bytes read=162
>>> KdcAccessibility: remove host1.fqdn
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Fri Jun 26 07:25:12 EDT 2015 1435317912000
sTime is Thu Apr 13 10:29:20 EDT 2017 149209376
suSec is 935095
error code is 7
error Message is Server not found in Kerberos database
crealm is LAB.COM
cname is drill/labhdp
realm is LAB.COM
sname is drill/ladhdp
msgType is 30
KrbException: Server not found in Kerberos database (7) - UNKNOWN_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:309)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:454)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:231)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:228)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.evaluateChallenge(AuthenticationOutcomeListener.java:228)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.initiate(AuthenticationOutcomeListener.java:89)
at
org.apache.drill.exec.rpc.user.UserClient.authenticate(UserClient.java:231)
at
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15967664#comment-15967664
]
Parag Darji commented on DRILL-5433:
Here is the output after enabling extended logging:
{code}
drill@:/var/log> klist
Ticket cache: FILE:/tmp/krb5cc_5005
Default principal: drill/lab...@lab.com
Valid starting ExpiresService principal
04/12/17 16:41:00 04/13/17 16:41:00 krbtgt/lab@lab.com
renew until 04/12/17 16:41:00
drill@:/home/drill> sqlline --maxWidth=1 -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Bad level value for property: java.util.logging.ConsoleHandler.level
Java config name: null
Native config name: /etc/krb5.conf
Loaded from native config
>> Look up native default credential cache
>>>KinitOptions cache name is /tmp/krb5cc_5005
>>>DEBUG client principal is drill/lab...@lab.com
>>>DEBUG server principal is krbtgt/lab@lab.com
>>>DEBUG key type: 18
>>>DEBUG auth time: Wed Apr 12 16:41:00 EDT 2017
>>>DEBUG start time: Wed Apr 12 16:41:00 EDT 2017
>>>DEBUG end time: Thu Apr 13 16:41:00 EDT 2017
>>>DEBUG renew_till time: Wed Apr 12 16:41:00 EDT 2017
>>> CCacheInputStream: readFlags() FORWARDABLE; RENEWABLE; INITIAL;
>>>DEBUG client principal is drill/lab...@lab.com
>>>DEBUG server principal is
>>>X-CACHECONF:/krb5_ccache_conf_data/fast_avail/krbtgt/lab@lab.com
>>>DEBUG key type: 0
>>>DEBUG auth time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG start time: null
>>>DEBUG end time: Wed Dec 31 19:00:00 EST 1969
>>>DEBUG renew_till time: null
>>> CCacheInputStream: readFlags()
Can't set level for java.util.logging.ConsoleHandler
Search Subject for Kerberos V5 INIT cred (<>,
sun.security.jgss.krb5.Krb5InitCredential)
Found ticket for drill/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Thu Apr 13 16:41:00 EDT 2017
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for drill/lab...@lab.com to go to krbtgt/lab@lab.com expiring
on Thu Apr 13 16:41:00 EDT 2017
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 18 17 16 23 1 3.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType
>>> KdcAccessibility: reset
>>> KrbKdcReq send: kdc=host1.fqdn UDP:88, timeout=3, number of retries =3,
>>> #bytes=661
>>> KDCCommunication: kdc=host1.fqdn UDP:88, timeout=3,Attempt =1, #bytes=661
>>> KrbKdcReq send: #bytes read=162
>>> KdcAccessibility: remove host1.fqdn
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Fri Jun 26 07:25:12 EDT 2015 1435317912000
sTime is Thu Apr 13 10:29:20 EDT 2017 149209376
suSec is 935095
error code is 7
error Message is Server not found in Kerberos database
crealm is LAB.COM
cname is drill/labhdp
realm is LAB.COM
sname is drill/ladhdp
msgType is 30
KrbException: Server not found in Kerberos database (7) - UNKNOWN_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:309)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:454)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:193)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:231)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener$1.run(AuthenticationOutcomeListener.java:228)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.evaluateChallenge(AuthenticationOutcomeListener.java:228)
at
org.apache.drill.exec.rpc.security.AuthenticationOutcomeListener.initiate(AuthenticationOutcomeListener.java:89)
at
org.apache.drill.exec.rpc.user.UserClient.authenticate(UserClient.java:231)
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:155)
at
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15966582#comment-15966582
]
Parag Darji edited comment on DRILL-5433 at 4/12/17 9:02 PM:
-
I do not see any error in drillbit.log:
{code}
2017-04-12 16:42:49,549 [main] INFO o.a.drill.exec.server.rest.WebServer -
Setting up HTTP connector for web server
2017-04-12 16:42:50,936 [main] INFO o.apache.drill.exec.server.Drillbit -
Startup completed (5728 ms).
{code}
However I do see this error in sqlline.log:
{code}
Override File: file:/opt/drill/conf/drill-override.conf
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.used
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.peak
2017-04-12 16:43:15,053 [main] INFO o.a.drill.common.config.DrillConfig -
Configuration and plugin file(s) identified in 50ms.
Base Configuration:
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-default.conf
Intermediate Configuration and Plugin files, in order of precedence:
- jar:file:/opt/drill/jars/drill-java-exec-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hive-core-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-memory-base-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-mongo-storage-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-jdbc-storage-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-logical-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hbase-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-gis-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-kudu-storage-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-hive-exec-shaded-1.10.0.jar!/drill-module.conf
Override File: file:/opt/drill/conf/drill-override.conf
2017-04-12 16:43:15,063 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.used
2017-04-12 16:43:15,064 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.peak
2017-04-12 16:43:15,299 [main] ERROR o.a.drill.exec.client.DrillClient -
Connection to altbthdlhdpsb01.cscdev.com:31010 failed with error
javax.security.sasl.SaslException: Authentication failed: Server requires
authentication using [kerberos, plain]. Insufficient credentials? [Caused by
javax.security.sasl.SaslException: Server requires authentication using
[kerberos, plain]. Insufficient credentials?]. Not retrying anymore
{code}
was (Author: pd47):
I do not see any error in drillbit.log:
2017-04-12 16:42:49,549 [main] INFO o.a.drill.exec.server.rest.WebServer -
Setting up HTTP connector for web server
2017-04-12 16:42:50,936 [main] INFO o.apache.drill.exec.server.Drillbit -
Startup completed (5728 ms).
However I do see this error in sqlline.log:
Override File: file:/opt/drill/conf/drill-override.conf
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.used
2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics -
Removing old metric since name matched newly registered metric. Metric name:
drill.allocator.root.peak
2017-04-12 16:43:15,053 [main] INFO o.a.drill.common.config.DrillConfig -
Configuration and plugin file(s) identified in 50ms.
Base Configuration:
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-default.conf
Intermediate Configuration and Plugin files, in order of precedence:
- jar:file:/opt/drill/jars/drill-java-exec-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hive-core-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-memory-base-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-mongo-storage-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-jdbc-storage-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-logical-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-storage-hbase-1.10.0.jar!/drill-module.conf
- jar:file:/opt/drill/jars/drill-gis-1.10.0.jar!/drill-module.conf
-
jar:file:/opt/drill/jars/drill-kudu-storage-1.10.0.jar!/drill-module.conf
-
[jira] [Comment Edited] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[
https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15966612#comment-15966612
]
Parag Darji edited comment on DRILL-5433 at 4/12/17 9:02 PM:
-
Here is error:
{code}
drill@:/home/drill> sqlline --maxWidth=1 -u
"jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com"
Error: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]]
(state=,code=0)
java.sql.SQLException: Failure in connecting to Drill:
org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]]
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166)
at
org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72)
at
org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69)
at
org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143)
at org.apache.drill.jdbc.Driver.connect(Driver.java:72)
at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167)
at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213)
at sqlline.Commands.connect(Commands.java:1083)
at sqlline.Commands.connect(Commands.java:1015)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36)
at sqlline.SqlLine.dispatch(SqlLine.java:742)
at sqlline.SqlLine.initArgs(SqlLine.java:528)
at sqlline.SqlLine.begin(SqlLine.java:596)
at sqlline.SqlLine.start(SqlLine.java:375)
at sqlline.SqlLine.main(SqlLine.java:268)
Caused by: org.apache.drill.exec.rpc.NonTransientRpcException:
javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused
by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]]
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432)
at
org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379)
at
org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157)
... 18 more
Caused by: javax.security.sasl.SaslException: Authentication failed
unexpectedly. [Caused by java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]]
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:207)
at
org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197)
at
com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85)
at
org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:155)
... 21 more
Caused by: java.util.concurrent.ExecutionException:
org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS
initiate failed [Caused by GSSException: No valid credentials provided
(Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]
at
com.google.common.util.concurrent.AbstractFuture$Sync.getValue(AbstractFuture.java:299)
at
com.google.common.util.concurrent.AbstractFuture$Sync.get(AbstractFuture.java:286)
at
com.google.common.util.concurrent.AbstractFuture.get(AbstractFuture.java:116)
at
com.google.common.util.concurrent.ForwardingFuture.get(ForwardingFuture.java:63)
at
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[ https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15966612#comment-15966612 ] Parag Darji commented on DRILL-5433: Here is error: drill@:/home/drill> sqlline --maxWidth=1 -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com" Error: Failure in connecting to Drill: org.apache.drill.exec.rpc.NonTransientRpcException: javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused by java.util.concurrent.ExecutionException: org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]] (state=,code=0) java.sql.SQLException: Failure in connecting to Drill: org.apache.drill.exec.rpc.NonTransientRpcException: javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused by java.util.concurrent.ExecutionException: org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]] at org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166) at org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72) at org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69) at org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143) at org.apache.drill.jdbc.Driver.connect(Driver.java:72) at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167) at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213) at sqlline.Commands.connect(Commands.java:1083) at sqlline.Commands.connect(Commands.java:1015) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36) at sqlline.SqlLine.dispatch(SqlLine.java:742) at sqlline.SqlLine.initArgs(SqlLine.java:528) at sqlline.SqlLine.begin(SqlLine.java:596) at sqlline.SqlLine.start(SqlLine.java:375) at sqlline.SqlLine.main(SqlLine.java:268) Caused by: org.apache.drill.exec.rpc.NonTransientRpcException: javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused by java.util.concurrent.ExecutionException: org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]] at org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157) at org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432) at org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379) at org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157) ... 18 more Caused by: javax.security.sasl.SaslException: Authentication failed unexpectedly. [Caused by java.util.concurrent.ExecutionException: org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)]] at org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:207) at org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197) at com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85) at org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:155) ... 21 more Caused by: java.util.concurrent.ExecutionException: org.apache.drill.exec.rpc.RpcException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - UNKNOWN_SERVER)] at com.google.common.util.concurrent.AbstractFuture$Sync.getValue(AbstractFuture.java:299) at com.google.common.util.concurrent.AbstractFuture$Sync.get(AbstractFuture.java:286) at com.google.common.util.concurrent.AbstractFuture.get(AbstractFuture.java:116) at com.google.common.util.concurrent.ForwardingFuture.get(ForwardingFuture.java:63) at com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:78)
[jira] [Commented] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
[ https://issues.apache.org/jira/browse/DRILL-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15966582#comment-15966582 ] Parag Darji commented on DRILL-5433: I do not see any error in drillbit.log: 2017-04-12 16:42:49,549 [main] INFO o.a.drill.exec.server.rest.WebServer - Setting up HTTP connector for web server 2017-04-12 16:42:50,936 [main] INFO o.apache.drill.exec.server.Drillbit - Startup completed (5728 ms). However I do see this error in sqlline.log: Override File: file:/opt/drill/conf/drill-override.conf 2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics - Removing old metric since name matched newly registered metric. Metric name: drill.allocator.root.used 2017-04-12 16:43:15,002 [main] WARN o.a.drill.exec.metrics.DrillMetrics - Removing old metric since name matched newly registered metric. Metric name: drill.allocator.root.peak 2017-04-12 16:43:15,053 [main] INFO o.a.drill.common.config.DrillConfig - Configuration and plugin file(s) identified in 50ms. Base Configuration: - jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-default.conf Intermediate Configuration and Plugin files, in order of precedence: - jar:file:/opt/drill/jars/drill-java-exec-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-common-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-storage-hive-core-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-memory-base-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-mongo-storage-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-jdbc-storage-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-logical-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-storage-hbase-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-gis-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-kudu-storage-1.10.0.jar!/drill-module.conf - jar:file:/opt/drill/jars/drill-hive-exec-shaded-1.10.0.jar!/drill-module.conf Override File: file:/opt/drill/conf/drill-override.conf 2017-04-12 16:43:15,063 [main] WARN o.a.drill.exec.metrics.DrillMetrics - Removing old metric since name matched newly registered metric. Metric name: drill.allocator.root.used 2017-04-12 16:43:15,064 [main] WARN o.a.drill.exec.metrics.DrillMetrics - Removing old metric since name matched newly registered metric. Metric name: drill.allocator.root.peak 2017-04-12 16:43:15,299 [main] ERROR o.a.drill.exec.client.DrillClient - Connection to altbthdlhdpsb01.cscdev.com:31010 failed with error javax.security.sasl.SaslException: Authentication failed: Server requires authentication using [kerberos, plain]. Insufficient credentials? [Caused by javax.security.sasl.SaslException: Server requires authentication using [kerberos, plain]. Insufficient credentials?]. Not retrying anymore > Authentication failed: Server requires authentication using [kerberos, plain] > - > > Key: DRILL-5433 > URL: https://issues.apache.org/jira/browse/DRILL-5433 > Project: Apache Drill > Issue Type: Task > Components: Functions - Drill >Affects Versions: 1.10.0 > Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled, > Hardware: VmWare >Reporter: Parag Darji >Priority: Minor > Labels: newbie, security > Fix For: 1.10.0 > > Original Estimate: 168h > Remaining Estimate: 168h > > I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled > I'm getting below error while running "drill-conf" or sqlline as user "drill" > which is configured in the "drill-override.conf" file. > drill@host:/opt/drill/bin> drill-conf > Error: Failure in connecting to Drill: > org.apache.drill.exec.rpc.NonTransientRpcException: > javax.security.sasl.SaslException: Authentication failed: Server requires > authentication using [kerberos, plain]. Insufficient credentials? [Caused by > javax.security.sasl.SaslException: Server requires authentication using > [kerberos, plain]. Insufficient credentials?] (state=,code=0) > java.sql.SQLException: Failure in connecting to Drill: > org.apache.drill.exec.rpc.NonTransientRpcException: > javax.security.sasl.SaslException: Authentication failed: Server requires > authentication using [kerberos, plain]. Insufficient credentials? [Caused by > javax.security.sasl.SaslException: Server requires authentication using > [kerberos, plain]. Insufficient credentials?] > at > org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166) > at > org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72) > at >
[jira] [Created] (DRILL-5433) Authentication failed: Server requires authentication using [kerberos, plain]
Parag Darji created DRILL-5433: -- Summary: Authentication failed: Server requires authentication using [kerberos, plain] Key: DRILL-5433 URL: https://issues.apache.org/jira/browse/DRILL-5433 Project: Apache Drill Issue Type: Task Components: Functions - Drill Affects Versions: 1.10.0 Environment: OS: Redhat Linux 6.7, HDP 2.5.3, Kerberos enabled, Hardware: VmWare Reporter: Parag Darji Priority: Minor Fix For: 1.10.0 I've setup Apace drill 1.10.0 on RHEL 6.7, HDP 2.5.3, kerberos enabled I'm getting below error while running "drill-conf" or sqlline as user "drill" which is configured in the "drill-override.conf" file. drill@host:/opt/drill/bin> drill-conf Error: Failure in connecting to Drill: org.apache.drill.exec.rpc.NonTransientRpcException: javax.security.sasl.SaslException: Authentication failed: Server requires authentication using [kerberos, plain]. Insufficient credentials? [Caused by javax.security.sasl.SaslException: Server requires authentication using [kerberos, plain]. Insufficient credentials?] (state=,code=0) java.sql.SQLException: Failure in connecting to Drill: org.apache.drill.exec.rpc.NonTransientRpcException: javax.security.sasl.SaslException: Authentication failed: Server requires authentication using [kerberos, plain]. Insufficient credentials? [Caused by javax.security.sasl.SaslException: Server requires authentication using [kerberos, plain]. Insufficient credentials?] at org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:166) at org.apache.drill.jdbc.impl.DrillJdbc41Factory.newDrillConnection(DrillJdbc41Factory.java:72) at org.apache.drill.jdbc.impl.DrillFactory.newConnection(DrillFactory.java:69) at org.apache.calcite.avatica.UnregisteredDriver.connect(UnregisteredDriver.java:143) at org.apache.drill.jdbc.Driver.connect(Driver.java:72) at sqlline.DatabaseConnection.connect(DatabaseConnection.java:167) at sqlline.DatabaseConnection.getConnection(DatabaseConnection.java:213) at sqlline.Commands.connect(Commands.java:1083) at sqlline.Commands.connect(Commands.java:1015) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at sqlline.ReflectiveCommandHandler.execute(ReflectiveCommandHandler.java:36) at sqlline.SqlLine.dispatch(SqlLine.java:742) at sqlline.SqlLine.initArgs(SqlLine.java:528) at sqlline.SqlLine.begin(SqlLine.java:596) at sqlline.SqlLine.start(SqlLine.java:375) at sqlline.SqlLine.main(SqlLine.java:268) Caused by: org.apache.drill.exec.rpc.NonTransientRpcException: javax.security.sasl.SaslException: Authentication failed: Server requires authentication using [kerberos, plain]. Insufficient credentials? [Caused by javax.security.sasl.SaslException: Server requires authentication using [kerberos, plain]. Insufficient credentials?] at org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:157) at org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:432) at org.apache.drill.exec.client.DrillClient.connect(DrillClient.java:379) at org.apache.drill.jdbc.impl.DrillConnectionImpl.(DrillConnectionImpl.java:157) ... 18 more Caused by: javax.security.sasl.SaslException: Authentication failed: Server requires authentication using [kerberos, plain]. Insufficient credentials? [Caused by javax.security.sasl.SaslException: Server requires authentication using [kerberos, plain]. Insufficient credentials?] at org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:204) at org.apache.drill.exec.rpc.user.UserClient$3.mapException(UserClient.java:197) at com.google.common.util.concurrent.AbstractCheckedFuture.checkedGet(AbstractCheckedFuture.java:85) at org.apache.drill.exec.rpc.user.UserClient.connect(UserClient.java:155) ... 21 more Caused by: javax.security.sasl.SaslException: Server requires authentication using [kerberos, plain]. Insufficient credentials? at org.apache.drill.exec.rpc.user.UserClient.getAuthenticatorFactory(UserClient.java:285) at org.apache.drill.exec.rpc.user.UserClient.authenticate(UserClient.java:216) ... 22 more apache drill 1.10.0 "this isn't your grandfather's sql" Same error when running below command: sqlline --maxWidth=1 -u "jdbc:drill:drillbit=host1.fqdn;auth=kerberos;principal=drill/lad...@lab.com" "Drill" user has has valid keytab/ticket. The Drill UI is working fine with local authentication.
