phoenix-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Josh Elser <els...@apache.org>
Subject Re: jdbc not work, phoenix 4.14.0-cdh5.11.2 + kerberos
Date Wed, 01 Aug 2018 18:55:24 GMT
Make sure you have the correct hbase-site.xml on the classpath of your 
application. This is how HBase client code knows to use Kerberos to 
authenticate.

On 7/31/18 11:39 PM, anung wrote:
> Hi Josh,
> 
> thank you for replying.
> 
> This is an excerpt from the debug log:
> 
> the client can connected to Zookeeper successfully:
> ....
> 2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
> org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo  - Trying
> to connect to a secure cluster as anung@REALM.COM with keytab
> /Users/anung/anung.keytab
> 2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
> org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo  -
> Successful login to secure cluster
> ....
> 2018-08-01 10:21:17,351 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
>   org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn  - Socket
> connection established, initiating session, client:
> /10.30.250.156:50181, server: ZKnode:2181
> 2018-08-01 10:21:17,354 [pool-1-thread-1-SendThread(ZKnode:2181)]
> DEBUG org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn  -
> Session establishment request sent on ZKnode:2181
> 2018-08-01 10:21:17,376 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
>   org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn  - Session
> establishment complete on server ZKnode:2181, sessionid =
> 0x364e0801fa52086, negotiated timeout = 60000
> 2018-08-01 10:21:17,380 [pool-1-thread-1-EventThread] DEBUG
> org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher  -
> hconnection-0x25f652be0x0, quorum=ZKnode:2181, baseZNode=/hbase
> Received ZooKeeper Event, type=None, state=SyncConnected, path=null
> 2018-08-01 10:21:17,384 [pool-1-thread-1-EventThread] DEBUG
> org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher  -
> hconnection-0x25f652be-0x364e0801fa52086 connected
> ...
> 
> but somehow HBase auth using SIMPLE instead of Kerberos:
> ...
> 2018-08-01 10:21:22,744 [hconnection-0x25f652be-shared--pool1-t1]
> DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl  - Use SIMPLE
> authentication for service ClientService, sasl=false
> 2018-08-01 10:21:22,826 [hconnection-0x25f652be-shared--pool1-t1]
> DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl  - Connecting to
> Regionserver:60020
> ...
> 2018-08-01 10:22:12,649 [pool-1-thread-1] DEBUG
> org.apache.hadoop.hbase.client.ResultBoundedCompletionService  -
> Replica 0 returns java.net.SocketTimeoutException: callTimeout=60000,
> callDuration=70972: row 'SYSTEM:CATALOG,,' on table 'hbase:meta' at
> region=hbase:meta,,1.1588230740,
> hostname=Regionserver,60020,1533093258500, seqNum=0
> ...
> 
> 
> Thank you,
> 
> BR,
> Anung
> 
> 
> On Wed, Aug 1, 2018 at 1:50 AM Josh Elser <elserj@apache.org> wrote:
>>
>> Did you enable DEBUG logging on the client or server side? Certainly if
>> you got a connection timeout, you at least got a stack trace that you
>> could share.
>>
>> You need to provide more information if you want help debugging your setup.
>>
>> On 7/31/18 6:29 AM, anung wrote:
>>> Hi All,
>>>
>>> I have CDH 5.11 cluster (kerberized, but HBase is not yet secured),
>>> installed Phoenix 4.14.0-cdh5.11.2 parcel method, test the JDBC
>>> connection and succeed.
>>> I can query, create table, drop table etc.
>>>
>>> And then I enabling kerberos security in HBase, restart service, and
>>> JDBC Phoenix is dead. Connection timeout. Just that, no other
>>> information.
>>>
>>> JDBC connection string:
>>>
>>> jdbc:phoenix:node1,node2,node3:2181:/hbase:anung@REALM.COM:/home/anung/anung.keytab
>>>
>>> I try kinit and use sqlline in the datanode and edgenode and yes
>>> Phoenix is working.
>>>
>>> is there something missing in my end?
>>>
>>> Thank you
>>>
>>> BR,
>>> Anung
>>>

Mime
View raw message