I did not, but as I Kerberized my cluster with Ambari, it did the mandatory modifications.
Loïc CHANEL Engineering student at TELECOM Nancy Trainee at Worldline - Villeurbanne 2015-08-27 1:17 GMT+02:00 Laurent H <[email protected]>: > Do you change some stuff in your hbase-site.xml when you've installed > Kerberos ? > > -- > Laurent HATIER - Consultant Big Data & Business Intelligence chez CapGemini > fr.linkedin.com/pub/laurent-hatier/25/36b/a86/ > <http://fr.linkedin.com/pub/laurent-h/25/36b/a86/> > > 2015-08-21 9:44 GMT+02:00 Loïc Chanel <[email protected]>: > > > Sorry if I didn't mention that, but yeah, I ran kinit before invoking > hbase > > shell, and klists command says that my user has a ticket. > > [root@host /]# klist > > Ticket cache: FILE:/tmp/krb5cc_0 > > Default principal: testuser@REALM > > > > Valid starting Expires Service principal > > 08/21/15 09:39:33 08/22/15 09:39:33 krbtgt/REALM@REALM > > renew until 08/21/15 09:39:33 > > > > > > Loïc CHANEL > > Engineering student at TELECOM Nancy > > Trainee at Worldline - Villeurbanne > > > > 2015-08-21 6:12 GMT+02:00 anil gupta <[email protected]>: > > > > > Did you run kinit command before invoking "hbase shell"? What does > klist > > > command says? > > > > > > On Thu, Aug 20, 2015 at 6:47 AM, Loïc Chanel < > > [email protected] > > > > > > > wrote: > > > > > > > By the way, as this may help to find my issue, I just tested typing > > > *whoami > > > > *in HBase shell : this returned me exactly what it should : > > > > testuser@REALM (auth:KERBEROS) > > > > groups: nobody, toast > > > > > > > > Loïc CHANEL > > > > Engineering student at TELECOM Nancy > > > > Trainee at Worldline - Villeurbanne > > > > > > > > 2015-08-20 15:17 GMT+02:00 Loïc Chanel <[email protected] > >: > > > > > > > > > Nothing more with your option :/ > > > > > > > > > > Loïc CHANEL > > > > > Engineering student at TELECOM Nancy > > > > > Trainee at Worldline - Villeurbanne > > > > > > > > > > 2015-08-20 15:04 GMT+02:00 Loïc Chanel < > [email protected] > > >: > > > > > > > > > >> I'm using HDP 2.2.4.2, with HBase 0.98.4.2.2. > > > > >> I have unlimited strength JCE installed. > > > > >> > > > > >> I'll try to have more clues with this option. > > > > >> > > > > >> Loïc CHANEL > > > > >> Engineering student at TELECOM Nancy > > > > >> Trainee at Worldline - Villeurbanne > > > > >> > > > > >> 2015-08-20 14:58 GMT+02:00 Ted Yu <[email protected]>: > > > > >> > > > > >>> Which hbase / hadoop release are you using ? > > > > >>> > > > > >>> Running with -Dsun.security.krb5.debug=true will provide more > clue. > > > > >>> > > > > >>> Do you have unlimited strength JCE installed ? > > > > >>> > > > > >>> Cheers > > > > >>> > > > > >>> On Thu, Aug 20, 2015 at 5:46 AM, Loïc Chanel < > > > > >>> [email protected]> > > > > >>> wrote: > > > > >>> > > > > >>> > Hi all, > > > > >>> > > > > > >>> > Since I kerberized my cluster, it seems like I can't use HBase > > > > anymore > > > > >>> ... > > > > >>> > For example, executing create 'toto','titi' on HBase shell > > results > > > > in > > > > >>> the > > > > >>> > printing of this line endlessly : > > > > >>> > WARN [main] security.UserGroupInformation: Not attempting to > > > > re-login > > > > >>> > since the last re-login was attempted less than 600 seconds > > before. > > > > >>> > > > > > >>> > And nothing else happens. > > > > >>> > I tried to restart HDFS and HBase, and to re-generate > credentials > > > and > > > > >>> > keytabs, but nothing changed. > > > > >>> > As for the logs, they are not very explicits, as the only thing > > > they > > > > >>> say > > > > >>> > (and keep saying) is : > > > > >>> > > > > > >>> > 2015-08-20 13:50:12,697 DEBUG [RpcServer.reader=2,port=60000] > > > > >>> > ipc.RpcServer: Created SASL server with mechanism = GSSAPI > > > > >>> > 2015-08-20 13:50:12,698 DEBUG [RpcServer.reader=2,port=60000] > > > > >>> > ipc.RpcServer: Have read input token of size 650 for processing > > by > > > > >>> > saslServer.evaluateResponse() > > > > >>> > 2015-08-20 13:50:12,704 DEBUG [RpcServer.reader=2,port=60000] > > > > >>> > ipc.RpcServer: Will send token of size 108 from saslServer. > > > > >>> > 2015-08-20 13:50:12,706 DEBUG [RpcServer.reader=2,port=60000] > > > > >>> > ipc.RpcServer: Have read input token of size 0 for processing > by > > > > >>> > saslServer.evaluateResponse() > > > > >>> > 2015-08-20 13:50:12,707 DEBUG [RpcServer.reader=2,port=60000] > > > > >>> > ipc.RpcServer: Will send token of size 32 from saslServer. > > > > >>> > 2015-08-20 13:50:12,708 DEBUG [RpcServer.reader=2,port=60000] > > > > >>> > ipc.RpcServer: RpcServer.listener,port=60000: DISCONNECTING > > client > > > > >>> > 192.168.6.148:43014 because read count=-1. Number of active > > > > >>> connections: 3 > > > > >>> > > > > > >>> > Do anyone has an idea about where this might come from, or how > to > > > > >>> solve it > > > > >>> > ? Because I couldn't find much documentation about this. > > > > >>> > Thanks in advance for your help ! > > > > >>> > > > > > >>> > > > > > >>> > Loïc > > > > >>> > > > > > >>> > Loïc CHANEL > > > > >>> > Engineering student at TELECOM Nancy > > > > >>> > Trainee at Worldline - Villeurbanne > > > > >>> > > > > > >>> > > > > >> > > > > >> > > > > > > > > > > > > > > > > > > > > > -- > > > Thanks & Regards, > > > Anil Gupta > > > > > >
