You will also need the below site properties for the HBase client / shell. They toggle on secure UGI and select the correct RPC engine.
<property> <name>hbase.security.authentication</name> <value>kerberos</value> </property> <property> <name>hbase.rpc.engine</name> <value>org.apache.hadoop.hbase.ipc.SecureRpcEngine</value> </property> On Monday, September 2, 2013, anil gupta wrote: > Hi Ted, > > We dont have any problem in running kinit command and invoking hbase shell. > We are trying to know the classpath required to invoke a hbase cluster? and > Does HBase shell has some special code to connect to HBase cluster? or It > just uses the -Djava.security.auth.login.config=/etc/hbase/conf/jaas.conf > to connect? > > Thanks, > Anil Gupta > > > On Mon, Sep 2, 2013 at 12:27 PM, Ted Yu <[email protected]<javascript:;>> > wrote: > > > Here is sample kinit command: > > > > /usr/bin/kinit -k -t path-to-user.headless.keytab user > > > > Take a look at the following in > > http://hbase.apache.org/book.html#trouble.client: > > 13.5.8 Secure Client Cannot Connect ([Caused by GSSException: No valid > > credentials provided (Mechanism level: Failed to find any Kerberos tgt)]) > > Cheers > > > > > > On Mon, Sep 2, 2013 at 11:36 AM, James Taylor > > <[email protected]<javascript:;> > > >wrote: > > > > > Or phrased another way: Taking Phoenix out of the equation, Anil would > > like > > > to figure out the necessary arguments and correct classpath to invoke > the > > > HBase shell against a secure HBase cluster. Once he's figured this out, > > he > > > plans to use the same setup to connect the Phoenix terminal client > (which > > > adds a couple jars to the classpath for sqlline) to the same secure > HBase > > > cluster. > > > > > > Any help is greatly appreciated. Thanks, > > > > > > James > > > > > > > > > On Mon, Sep 2, 2013 at 11:09 AM, anil gupta > > > <[email protected]<javascript:;> > > > > wrote: > > > > > > > Hi Guys, > > > > > > > > From last 1 week i have been trying to connect Phoenix to a secure > > HBase > > > > cluster. I have been working with Phoenix team to get it going( > > > > https://github.com/forcedotcom/phoenix/issues/382). Unfortunately, i > > > > haven't been successful. > > > > > > > > We currently use hbase shell for some querying but we would like to > > move > > > to > > > > a SQL like interface so we want Phoenix. > > > > As per my analysis of hbase shell, We do kinit and then run shell, it > > is > > > > able to connect to secure HBase by using the following java property: > > > > -Djava.security.auth.login.config=/etc/hbase/conf/jaas.conf > > > > > > > > HBase shell doesnt uses anything extra(apart from jaas.conf) for > > > connecting > > > > to secure cluster. Right? > > > > > > > > We are using cdh4.3 i.e. HBase0.94.6. > > > > > > > > -- > > > > Thanks & Regards, > > > > Anil Gupta > > > > > > > > > > > > > -- > Thanks & Regards, > Anil Gupta > -- Best regards, - Andy Problems worthy of attack prove their worth by hitting back. - Piet Hein (via Tom White)
