You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@zeppelin.apache.org by Arpad Beregszaszi <ar...@gmx.de> on 2017/04/10 10:37:23 UTC
Data Source Authorization - JDBC Credential
Hi all,
I'm pretty new with Zeppeln and I need help with one problem regarding data
source authorization as its described here:
https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.htm
l
I can successfully connect Zeppelin to my MySQL Server. Now I want to give
different users access to their databases.
For that I want the JDBC interpreter to use different database credentials,
depending on the Zeppelin user as defined in shiro.ini.
But when I create credential information, the JDBC interpreter doesn't use
them for the db connection, but the default username and password, which is
empty.
My Interpreter Is instantiated per user.
Java.sql.SQLException: Access denied for user ' ' @ 'IP' (using password:
NO)
Anyone an idea of whats wrong?
Thanks, Arpad
Re: Data Source Authorization - JDBC Credential
Posted by moon soo Lee <mo...@apache.org>.
I think actual user passed to JDBC driver is retrieved here
https://github.com/apache/zeppelin/blob/v0.7.1/jdbc/src/main/java/org/apache/zeppelin/jdbc/JDBCInterpreter.java#L322
On Tue, Apr 25, 2017 at 11:15 AM Paul Brenner <pb...@placeiq.com> wrote:
> I have restarted interpreter after creating the entity in credential menu.
> It still doesn’t work. I think that, because this issue occurs with both
> credentials and when I set default.user, it is somehow an issue with how
> the snowflake driver is connecting with zeppelin’s jdbc driver. I tried
> tracing through the code on both ends but didn’t see any obvious issues.
> The stack trace shows the path the information is trying to travel:
>
> ava.sql.SQLException: Missing user name.
> at
> net.snowflake.client.jdbc.SnowflakeConnectionV1.<init>(SnowflakeConnectionV1.java:209)
> at
> net.snowflake.client.jdbc.SnowflakeDriver.connect(SnowflakeDriver.java:350)
> at java.sql.DriverManager.getConnection(DriverManager.java:664)
> at java.sql.DriverManager.getConnection(DriverManager.java:208)
> at
> org.apache.commons.dbcp2.DriverManagerConnectionFactory.createConnection(DriverManagerConnectionFactory.java:79)
> at
> org.apache.commons.dbcp2.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:205)
> at
> org.apache.commons.pool2.impl.GenericObjectPool.create(GenericObjectPool.java:836)
> at
> org.apache.commons.pool2.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:434)
> at
> org.apache.commons.pool2.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:361)
> at org.apache.commons.dbcp2.PoolingDriver.connect(PoolingDriver.java:129)
> at java.sql.DriverManager.getConnection(DriverManager.java:664)
> at java.sql.DriverManager.getConnection(DriverManager.java:270)
> at
> org.apache.zeppelin.jdbc.JDBCInterpreter.getConnectionFromPool(JDBCInterpreter.java:354)
> at
> org.apache.zeppelin.jdbc.JDBCInterpreter.getConnection(JDBCInterpreter.java:372)
> at
> org.apache.zeppelin.jdbc.JDBCInterpreter.executeSql(JDBCInterpreter.java:564)
> at
> org.apache.zeppelin.jdbc.JDBCInterpreter.interpret(JDBCInterpreter.java:692)
> at
> org.apache.zeppelin.interpreter.LazyOpenInterpreter.interpret(LazyOpenInterpreter.java:95)
> at
> org.apache.zeppelin.interpreter.remote.RemoteInterpreterServer$InterpretJob.jobRun(RemoteInterpreterServer.java:490)
> at org.apache.zeppelin.scheduler.Job.run(Job.java:175)
> at
> org.apache.zeppelin.scheduler.ParallelScheduler$JobRunner.run(ParallelScheduler.java:162)
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
> at
> java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
> at
> java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
>
>
> So the user information looks like it should be passing out of the
> zeppelin jdbc interpreter into java.sql.DriverManager. Is that what is
> happening in the working version you are testing with? If I can hunt down
> any better information about how the user/pass is being passed to
> java.sql.DriverManager I might be able to get some help from the snowflake
> people… perhaps it is an issue on their side?
>
> I see the following in JDBCInterpreter.java:
>
> String user = interpreterContext.getAuthenticationInfo().getUser()
>
> can I assume that is passing the proper user info to
> java.sql.DriverManager?
> <http://www.placeiq.com/> <http://www.placeiq.com/>
> <http://www.placeiq.com/> Paul Brenner <https://twitter.com/placeiq>
> <https://twitter.com/placeiq> <https://twitter.com/placeiq>
> <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ>
> <https://www.linkedin.com/company/placeiq>
> <https://www.linkedin.com/company/placeiq>
> DATA SCIENTIST
> *(217) 390-3033 <(217)%20390-3033> *
>
> <http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP>
> <http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/>
> <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>[image:
> PlaceIQ:Location Data Accuracy]
> <http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/>
>
> On Sat, Apr 22, 2017 at 11:16 PM moon soo Lee <moon soo Lee
> <moon+soo+Lee+%3Cmoon@apache.org%3E>> wrote:
>
>> Hmm that's strange. I can see 0.7.1 works as expected when I remove
>> default.user/default.password and then set credential. Also i can set
>> default.user, default.password without using credential menu and it works
>> as expected as well.
>>
>> Have you tried restart interpreter after create/update entity in
>> credential menu? Credential does not apply until interpreter is restarted.
>>
>> Thanks,
>> moon
>>
>> On Sat, Apr 22, 2017 at 4:42 AM Paul Brenner <pb...@placeiq.com>
>> wrote:
>>
>>> Using 0.7.1 and yes I tried removing default.user/default.password after
>>> setting my credentials in the credentials section. It did not work.
>>>
>>> I found that actually setting the correct value for default.user did not
>>> work either. Same error. It seems like the zeppelin jdbc interpreter is not
>>> passing the defined user and password to the snowflake jdbc connector.
>>>
>>> However, I also was unable to set the zeppelin.jdbc.auth.type. I saw it
>>> should be able to take “SIMPLE” or “KERBEROS” as a value. Either option
>>> results in "java.lang.ClassNotFoundException:
>>> org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod”. I’m
>>> not sure if that is related.
>>>
>>> One more question. Here is what I see in the log files:
>>> INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.auth.type INFO
>>> [2017-04-22 11:37:48,598] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: common, value: max_count INFO
>>> [2017-04-22 11:37:48,598] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.principal INFO
>>> [2017-04-22 11:37:48,598] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: zeppelin, value:
>>> interpreter.localRepo INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: default, value: url INFO [2017-04-22
>>> 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key:
>>> default, value: driver INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: zeppelin, value:
>>> jdbc.keytab.location INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.concurrent.use
>>> INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2}
>>> JDBCInterpreter.java[open]:159) - key: zeppelin, value:
>>> jdbc.concurrent.max_connection ERROR [2017-04-22 11:37:48,601]
>>> ({pool-2-thread-2} JDBCInterpreter.java[open]:177) - zeppelin will be
>>> ignored. driver.zeppelin and zeppelin.url is mandatory.
>>>
>>> To make that a bit more readable I can trim it down to…
>>> INFO - key: zeppelin, value: jdbc.auth.type
>>> INFO - key: common, value: max_count
>>> INFO - key: zeppelin, value: jdbc.principal
>>> INFO - key: zeppelin, value: interpreter.localRepo
>>> INFO - key: default, value: url
>>> INFO - key: default, value: driver
>>> INFO - key: zeppelin, value: jdbc.keytab.location
>>> INFO - key: zeppelin, value: jdbc.concurrent.use
>>> INFO - key: zeppelin, value: jdbc.concurrent.max_connection
>>> ERROR - zeppelin will be ignored. driver.zeppelin and zeppelin.url is
>>> mandatory.
>>>
>>> So I can confirm that it isn’t trying to grab the default.user, but I
>>> don’t see anything that indicates it is trying to use credentials… Also is
>>> that ERROR relevant?
>>>
>>> <http://www.placeiq.com/> <http://www.placeiq.com/>
>>> <http://www.placeiq.com/> Paul Brenner <https://twitter.com/placeiq>
>>> <https://twitter.com/placeiq> <https://twitter.com/placeiq>
>>> <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ>
>>> <https://www.linkedin.com/company/placeiq>
>>> <https://www.linkedin.com/company/placeiq>
>>> DATA SCIENTIST
>>> *(217) 390-3033 <(217)%20390-3033> *
>>>
>>> <http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP>
>>> <http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/>
>>> <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>[image:
>>> PlaceIQ:Location Data Accuracy]
>>> <http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/>
>>>
>>>
>>> On Sat, Apr 22, 2017 at 1:21 AM moon soo Lee <moon soo Lee
>>> <moon+soo+Lee+%3Cmoon@apache.org%3E>> wrote:
>>>
>>>> Hi,
>>>>
>>>> Which version of Zeppelin are you using? Have you tried remove
>>>> 'default.user' and 'default.password' property from interpreter menu and
>>>> create entity in credential menu?
>>>>
>>>> Thanks,
>>>> moon
>>>>
>>>> On Fri, Apr 21, 2017 at 11:55 AM Paul Brenner <pb...@placeiq.com>
>>>> wrote:
>>>>
>>>>> Are credentials confirmed working with the JDBC interpreter? I’m
>>>>> trying to get jdbc working with snowflake. If I hardcore my username and
>>>>> password into the default url everything works great… but this of course
>>>>> won’t work in a multi user environment.
>>>>>
>>>>> However, if I try to use default username, default password, or
>>>>> zeppelin credentials I get stuck at "java.sql.SQLException: Missing
>>>>> user name.”
>>>>>
>>>>> Sounds like a different issue than the OP.
>>>>>
>>>>> <http://www.placeiq.com/> <http://www.placeiq.com/>
>>>>> <http://www.placeiq.com/> Paul Brenner <https://twitter.com/placeiq>
>>>>> <https://twitter.com/placeiq> <https://twitter.com/placeiq>
>>>>> <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ>
>>>>> <https://www.linkedin.com/company/placeiq>
>>>>> <https://www.linkedin.com/company/placeiq>
>>>>> DATA SCIENTIST
>>>>> *(217) 390-3033 <(217)%20390-3033> *
>>>>>
>>>>> <http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/>
>>>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>>>> <http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/>
>>>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>>>> <http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP>
>>>>> <http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/>
>>>>> <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>[image:
>>>>> PlaceIQ:Location Data Accuracy]
>>>>> <http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/>
>>>>>
>>>>> On Thu, Apr 20, 2017 at 8:49 PM moon soo Lee <moon soo Lee
>>>>> <moon+soo+Lee+%3Cmoon@apache.org%3E>> wrote:
>>>>>
>>>>>> Hi,
>>>>>>
>>>>>> If you remove
>>>>>>
>>>>>> 'default.user'
>>>>>> 'default.password'
>>>>>>
>>>>>> properties from jdbc interpreter setting, then Zeppelin will use
>>>>>> database username and password from credential database for each user.
>>>>>>
>>>>>> I also created a patch [1] to use credential database when
>>>>>> 'default'.user' and 'default.password' is empty string.
>>>>>>
>>>>>> Hope this helps.
>>>>>>
>>>>>> Best,
>>>>>> moon
>>>>>>
>>>>>> [1] https://github.com/apache/zeppelin/pull/2269
>>>>>>
>>>>>> On Mon, Apr 10, 2017 at 3:37 AM Arpad Beregszaszi <
>>>>>> arpad.beregszaszi@gmx.de> wrote:
>>>>>>
>>>>>>> Hi all,
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> I’m pretty new with Zeppeln and I need help with one problem
>>>>>>> regarding data source authorization as its described here:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.html
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> I can successfully connect Zeppelin to my MySQL Server. Now I want
>>>>>>> to give different users access to their databases.
>>>>>>>
>>>>>>> For that I want the JDBC interpreter to use different database
>>>>>>> credentials, depending on the Zeppelin user as defined in shiro.ini.
>>>>>>>
>>>>>>> But when I create credential information, the JDBC interpreter
>>>>>>> doesn’t use them for the db connection, but the default username and
>>>>>>> password, which is empty.
>>>>>>>
>>>>>>> My Interpreter Is instantiated per user.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Java.sql.SQLException: Access denied for user ‘ ‘ @ ‘IP‘ (using
>>>>>>> password: NO)
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Anyone an idea of whats wrong?
>>>>>>>
>>>>>>> Thanks, Arpad
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>
>
>
Re: Data Source Authorization - JDBC Credential
Posted by Paul Brenner <pb...@placeiq.com>.
I have restarted interpreter after creating the entity in credential menu. It still doesn’t work. I think that, because this issue occurs with both credentials and when I set default.user, it is somehow an issue with how the snowflake driver is connecting with zeppelin’s jdbc driver. I tried tracing through the code on both ends but didn’t see any obvious issues. The stack trace shows the path the information is trying to travel:
ava.sql.SQLException: Missing user name.
at net.snowflake.client.jdbc.SnowflakeConnectionV1.<init>(SnowflakeConnectionV1.java:209)
at net.snowflake.client.jdbc.SnowflakeDriver.connect(SnowflakeDriver.java:350)
at java.sql.DriverManager.getConnection(DriverManager.java:664)
at java.sql.DriverManager.getConnection(DriverManager.java:208)
at org.apache.commons.dbcp2.DriverManagerConnectionFactory.createConnection(DriverManagerConnectionFactory.java:79)
at org.apache.commons.dbcp2.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:205)
at org.apache.commons.pool2.impl.GenericObjectPool.create(GenericObjectPool.java:836)
at org.apache.commons.pool2.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:434)
at org.apache.commons.pool2.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:361)
at org.apache.commons.dbcp2.PoolingDriver.connect(PoolingDriver.java:129)
at java.sql.DriverManager.getConnection(DriverManager.java:664)
at java.sql.DriverManager.getConnection(DriverManager.java:270)
at org.apache.zeppelin.jdbc.JDBCInterpreter.getConnectionFromPool(JDBCInterpreter.java:354)
at org.apache.zeppelin.jdbc.JDBCInterpreter.getConnection(JDBCInterpreter.java:372)
at org.apache.zeppelin.jdbc.JDBCInterpreter.executeSql(JDBCInterpreter.java:564)
at org.apache.zeppelin.jdbc.JDBCInterpreter.interpret(JDBCInterpreter.java:692)
at org.apache.zeppelin.interpreter.LazyOpenInterpreter.interpret(LazyOpenInterpreter.java:95)
at org.apache.zeppelin.interpreter.remote.RemoteInterpreterServer$InterpretJob.jobRun(RemoteInterpreterServer.java:490)
at org.apache.zeppelin.scheduler.Job.run(Job.java:175)
at org.apache.zeppelin.scheduler.ParallelScheduler$JobRunner.run(ParallelScheduler.java:162)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
So the user information looks like it should be passing out of the zeppelin jdbc interpreter into java.sql.DriverManager. Is that what is happening in the working version you are testing with? If I can hunt down any better information about how the user/pass is being passed to java.sql.DriverManager I might be able to get some help from the snowflake people… perhaps it is an issue on their side?
I see the following in JDBCInterpreter.java:
String
user
=
interpreterContext
.
getAuthenticationInfo()
.
getUser()
can I assume that is passing the proper user info to java.sql.DriverManager?
http://www.placeiq.com/ http://www.placeiq.com/ http://www.placeiq.com/
Paul Brenner
https://twitter.com/placeiq https://twitter.com/placeiq https://twitter.com/placeiq
https://www.facebook.com/PlaceIQ https://www.facebook.com/PlaceIQ
https://www.linkedin.com/company/placeiq https://www.linkedin.com/company/placeiq
DATA SCIENTIST
(217) 390-3033
http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/ http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/ http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/
On Sat, Apr 22, 2017 at 11:16 PM moon soo Lee
<
mailto:moon soo Lee <mo...@apache.org>
> wrote:
a, pre, code, a:link, body { word-wrap: break-word !important; }
Hmm that's strange. I can see 0.7.1 works as expected when I remove default.user/default.password and then set credential. Also i can set default.user, default.password without using credential menu and it works as expected as well.
Have you tried restart interpreter after create/update entity in credential menu? Credential does not apply until interpreter is restarted.
Thanks,
moon
On Sat, Apr 22, 2017 at 4:42 AM Paul Brenner <
mailto:pbrenner@placeiq.com
> wrote:
Using 0.7.1 and yes I tried removing default.user/default.password after setting my credentials in the credentials section. It did not work.
I found that actually setting the correct value for default.user did not work either. Same error. It seems like the zeppelin jdbc interpreter is not passing the defined user and password to the snowflake jdbc connector.
However, I also was unable to set the
zeppelin.jdbc.auth.type. I saw it should be able to take “SIMPLE” or “KERBEROS” as a value. Either option results in "
java.lang.ClassNotFoundException: org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod”. I’m not sure if that is related.
One more question. Here is what I see in the log files:
INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.auth.type INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: common, value: max_count INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.principal INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: interpreter.localRepo INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: default, value: url INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: default, value: driver INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.keytab.location INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.concurrent.use INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.concurrent.max_connection ERROR [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:177) - zeppelin will be ignored. driver.zeppelin and zeppelin.url is mandatory.
To make that a bit more readable I can trim it down to…
INFO - key: zeppelin, value: jdbc.auth.type
INFO - key: common, value: max_count
INFO - key: zeppelin, value: jdbc.principal
INFO - key: zeppelin, value: interpreter.localRepo
INFO - key: default, value: url
INFO - key: default, value: driver
INFO - key: zeppelin, value: jdbc.keytab.location
INFO - key: zeppelin, value: jdbc.concurrent.use
INFO - key: zeppelin, value: jdbc.concurrent.max_connection
ERROR - zeppelin will be ignored. driver.zeppelin and zeppelin.url is mandatory.
So I can confirm that it isn’t trying to grab the default.user, but I don’t see anything that indicates it is trying to use credentials… Also is that ERROR relevant?
http://www.placeiq.com/ http://www.placeiq.com/ http://www.placeiq.com/
Paul Brenner
https://twitter.com/placeiq https://twitter.com/placeiq https://twitter.com/placeiq
https://www.facebook.com/PlaceIQ https://www.facebook.com/PlaceIQ
https://www.linkedin.com/company/placeiq https://www.linkedin.com/company/placeiq
DATA SCIENTIST
tel:(217)%20390-3033
http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/ http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/ http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/
On Sat, Apr 22, 2017 at 1:21 AM moon soo Lee
<
mailto:moon+soo+Lee+%3Cmoon@apache.org%3E
> wrote:
Hi,
Which version of Zeppelin are you using? Have you tried remove 'default.user' and 'default.password' property from interpreter menu and create entity in credential menu?
Thanks,
moon
On Fri, Apr 21, 2017 at 11:55 AM Paul Brenner <
mailto:pbrenner@placeiq.com
> wrote:
Are credentials confirmed working with the JDBC interpreter? I’m trying to get jdbc working with snowflake. If I hardcore my username and password into the default url everything works great… but this of course won’t work in a multi user environment.
However, if I try to use default username, default password, or zeppelin credentials I get stuck at "
java.sql.SQLException: Missing user name.”
Sounds like a different issue than the OP.
http://www.placeiq.com/ http://www.placeiq.com/ http://www.placeiq.com/
Paul Brenner
https://twitter.com/placeiq https://twitter.com/placeiq https://twitter.com/placeiq
https://www.facebook.com/PlaceIQ https://www.facebook.com/PlaceIQ
https://www.linkedin.com/company/placeiq https://www.linkedin.com/company/placeiq
DATA SCIENTIST
tel:(217)%20390-3033
http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/ http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/ http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/
On Thu, Apr 20, 2017 at 8:49 PM moon soo Lee
<
mailto:moon+soo+Lee+%3Cmoon@apache.org%3E
> wrote:
Hi,
If you remove
'default.user'
'default.password'
properties from jdbc interpreter setting, then Zeppelin will use database username and password from credential database for each user.
I also created a patch [1] to use credential database when 'default'.user' and 'default.password' is empty string.
Hope this helps.
Best,
moon
[1]
https://github.com/apache/zeppelin/pull/2269
On Mon, Apr 10, 2017 at 3:37 AM Arpad Beregszaszi <
mailto:arpad.beregszaszi@gmx.de
> wrote:
Hi all,
I’m pretty new with Zeppeln and I need help with one problem regarding data source authorization as its described here:
https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.html
I can successfully connect Zeppelin to my MySQL Server. Now I want to give different users access to their databases.
For that I want the JDBC interpreter to use different database credentials, depending on the Zeppelin user as defined in shiro.ini.
But when I create credential information, the JDBC interpreter doesn’t use them for the db connection, but the default username and password, which is empty.
My Interpreter Is instantiated per user.
Java.sql.SQLException: Access denied for user ‘ ‘ @ ‘IP‘ (using password: NO)
Anyone an idea of whats wrong?
Thanks, Arpad
Re: Data Source Authorization - JDBC Credential
Posted by moon soo Lee <mo...@apache.org>.
Hmm that's strange. I can see 0.7.1 works as expected when I remove
default.user/default.password and then set credential. Also i can set
default.user, default.password without using credential menu and it works
as expected as well.
Have you tried restart interpreter after create/update entity in credential
menu? Credential does not apply until interpreter is restarted.
Thanks,
moon
On Sat, Apr 22, 2017 at 4:42 AM Paul Brenner <pb...@placeiq.com> wrote:
> Using 0.7.1 and yes I tried removing default.user/default.password after
> setting my credentials in the credentials section. It did not work.
>
> I found that actually setting the correct value for default.user did not
> work either. Same error. It seems like the zeppelin jdbc interpreter is not
> passing the defined user and password to the snowflake jdbc connector.
>
> However, I also was unable to set the zeppelin.jdbc.auth.type. I saw it
> should be able to take “SIMPLE” or “KERBEROS” as a value. Either option
> results in "java.lang.ClassNotFoundException:
> org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod”. I’m
> not sure if that is related.
>
> One more question. Here is what I see in the log files:
> INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.auth.type INFO
> [2017-04-22 11:37:48,598] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: common, value: max_count INFO
> [2017-04-22 11:37:48,598] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.principal INFO
> [2017-04-22 11:37:48,598] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: zeppelin, value:
> interpreter.localRepo INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: default, value: url INFO [2017-04-22
> 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key:
> default, value: driver INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: zeppelin, value:
> jdbc.keytab.location INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.concurrent.use
> INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2}
> JDBCInterpreter.java[open]:159) - key: zeppelin, value:
> jdbc.concurrent.max_connection ERROR [2017-04-22 11:37:48,601]
> ({pool-2-thread-2} JDBCInterpreter.java[open]:177) - zeppelin will be
> ignored. driver.zeppelin and zeppelin.url is mandatory.
>
> To make that a bit more readable I can trim it down to…
> INFO - key: zeppelin, value: jdbc.auth.type
> INFO - key: common, value: max_count
> INFO - key: zeppelin, value: jdbc.principal
> INFO - key: zeppelin, value: interpreter.localRepo
> INFO - key: default, value: url
> INFO - key: default, value: driver
> INFO - key: zeppelin, value: jdbc.keytab.location
> INFO - key: zeppelin, value: jdbc.concurrent.use
> INFO - key: zeppelin, value: jdbc.concurrent.max_connection
> ERROR - zeppelin will be ignored. driver.zeppelin and zeppelin.url is
> mandatory.
>
> So I can confirm that it isn’t trying to grab the default.user, but I
> don’t see anything that indicates it is trying to use credentials… Also is
> that ERROR relevant?
>
> <http://www.placeiq.com/> <http://www.placeiq.com/>
> <http://www.placeiq.com/> Paul Brenner <https://twitter.com/placeiq>
> <https://twitter.com/placeiq> <https://twitter.com/placeiq>
> <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ>
> <https://www.linkedin.com/company/placeiq>
> <https://www.linkedin.com/company/placeiq>
> DATA SCIENTIST
> *(217) 390-3033 <(217)%20390-3033> *
>
> <http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP>
> <http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/>
> <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>[image:
> PlaceIQ:Location Data Accuracy]
> <http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/>
>
>
> On Sat, Apr 22, 2017 at 1:21 AM moon soo Lee <moon soo Lee
> <moon+soo+Lee+%3Cmoon@apache.org%3E>> wrote:
>
>> Hi,
>>
>> Which version of Zeppelin are you using? Have you tried remove
>> 'default.user' and 'default.password' property from interpreter menu and
>> create entity in credential menu?
>>
>> Thanks,
>> moon
>>
>> On Fri, Apr 21, 2017 at 11:55 AM Paul Brenner <pb...@placeiq.com>
>> wrote:
>>
>>> Are credentials confirmed working with the JDBC interpreter? I’m trying
>>> to get jdbc working with snowflake. If I hardcore my username and password
>>> into the default url everything works great… but this of course won’t work
>>> in a multi user environment.
>>>
>>> However, if I try to use default username, default password, or zeppelin
>>> credentials I get stuck at "java.sql.SQLException: Missing user name.”
>>>
>>> Sounds like a different issue than the OP.
>>>
>>> <http://www.placeiq.com/> <http://www.placeiq.com/>
>>> <http://www.placeiq.com/> Paul Brenner <https://twitter.com/placeiq>
>>> <https://twitter.com/placeiq> <https://twitter.com/placeiq>
>>> <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ>
>>> <https://www.linkedin.com/company/placeiq>
>>> <https://www.linkedin.com/company/placeiq>
>>> DATA SCIENTIST
>>> *(217) 390-3033 <(217)%20390-3033> *
>>>
>>> <http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
>>> <http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
>>> <http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP>
>>> <http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/>
>>> <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>[image:
>>> PlaceIQ:Location Data Accuracy]
>>> <http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/>
>>>
>>> On Thu, Apr 20, 2017 at 8:49 PM moon soo Lee <moon soo Lee
>>> <moon+soo+Lee+%3Cmoon@apache.org%3E>> wrote:
>>>
>>>> Hi,
>>>>
>>>> If you remove
>>>>
>>>> 'default.user'
>>>> 'default.password'
>>>>
>>>> properties from jdbc interpreter setting, then Zeppelin will use
>>>> database username and password from credential database for each user.
>>>>
>>>> I also created a patch [1] to use credential database when
>>>> 'default'.user' and 'default.password' is empty string.
>>>>
>>>> Hope this helps.
>>>>
>>>> Best,
>>>> moon
>>>>
>>>> [1] https://github.com/apache/zeppelin/pull/2269
>>>>
>>>> On Mon, Apr 10, 2017 at 3:37 AM Arpad Beregszaszi <
>>>> arpad.beregszaszi@gmx.de> wrote:
>>>>
>>>>> Hi all,
>>>>>
>>>>>
>>>>>
>>>>> I’m pretty new with Zeppeln and I need help with one problem regarding
>>>>> data source authorization as its described here:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.html
>>>>>
>>>>>
>>>>>
>>>>> I can successfully connect Zeppelin to my MySQL Server. Now I want to
>>>>> give different users access to their databases.
>>>>>
>>>>> For that I want the JDBC interpreter to use different database
>>>>> credentials, depending on the Zeppelin user as defined in shiro.ini.
>>>>>
>>>>> But when I create credential information, the JDBC interpreter doesn’t
>>>>> use them for the db connection, but the default username and password,
>>>>> which is empty.
>>>>>
>>>>> My Interpreter Is instantiated per user.
>>>>>
>>>>>
>>>>>
>>>>> Java.sql.SQLException: Access denied for user ‘ ‘ @ ‘IP‘ (using
>>>>> password: NO)
>>>>>
>>>>>
>>>>>
>>>>> Anyone an idea of whats wrong?
>>>>>
>>>>> Thanks, Arpad
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>
>
>
Re: Data Source Authorization - JDBC Credential
Posted by Paul Brenner <pb...@placeiq.com>.
Using 0.7.1 and yes I tried removing default.user/default.password after setting my credentials in the credentials section. It did not work.
I found that actually setting the correct value for default.user did not work either. Same error. It seems like the zeppelin jdbc interpreter is not passing the defined user and password to the snowflake jdbc connector.
However, I also was unable to set the
zeppelin.jdbc.auth.type. I saw it should be able to take “SIMPLE” or “KERBEROS” as a value. Either option results in "
java.lang.ClassNotFoundException: org.apache.hadoop.security.UserGroupInformation$AuthenticationMethod”. I’m not sure if that is related.
One more question. Here is what I see in the log files:
INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.auth.type INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: common, value: max_count INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.principal INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: interpreter.localRepo INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: default, value: url INFO [2017-04-22 11:37:48,598] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: default, value: driver INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.keytab.location INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.concurrent.use INFO [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:159) - key: zeppelin, value: jdbc.concurrent.max_connection ERROR [2017-04-22 11:37:48,601] ({pool-2-thread-2} JDBCInterpreter.java[open]:177) - zeppelin will be ignored. driver.zeppelin and zeppelin.url is mandatory.
To make that a bit more readable I can trim it down to…
INFO - key: zeppelin, value: jdbc.auth.type
INFO - key: common, value: max_count
INFO - key: zeppelin, value: jdbc.principal
INFO - key: zeppelin, value: interpreter.localRepo
INFO - key: default, value: url
INFO - key: default, value: driver
INFO - key: zeppelin, value: jdbc.keytab.location
INFO - key: zeppelin, value: jdbc.concurrent.use
INFO - key: zeppelin, value: jdbc.concurrent.max_connection
ERROR - zeppelin will be ignored. driver.zeppelin and zeppelin.url is mandatory.
So I can confirm that it isn’t trying to grab the default.user, but I don’t see anything that indicates it is trying to use credentials… Also is that ERROR relevant?
http://www.placeiq.com/ http://www.placeiq.com/ http://www.placeiq.com/
Paul Brenner
https://twitter.com/placeiq https://twitter.com/placeiq https://twitter.com/placeiq
https://www.facebook.com/PlaceIQ https://www.facebook.com/PlaceIQ
https://www.linkedin.com/company/placeiq https://www.linkedin.com/company/placeiq
DATA SCIENTIST
tel:(217)%20390-3033
http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/ http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/ http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/
On Sat, Apr 22, 2017 at 1:21 AM moon soo Lee
<
mailto:moon soo Lee <mo...@apache.org>
> wrote:
a, pre, code, a:link, body { word-wrap: break-word !important; }
Hi,
Which version of Zeppelin are you using? Have you tried remove 'default.user' and 'default.password' property from interpreter menu and create entity in credential menu?
Thanks,
moon
On Fri, Apr 21, 2017 at 11:55 AM Paul Brenner <
mailto:pbrenner@placeiq.com
> wrote:
Are credentials confirmed working with the JDBC interpreter? I’m trying to get jdbc working with snowflake. If I hardcore my username and password into the default url everything works great… but this of course won’t work in a multi user environment.
However, if I try to use default username, default password, or zeppelin credentials I get stuck at "
java.sql.SQLException: Missing user name.”
Sounds like a different issue than the OP.
http://www.placeiq.com/ http://www.placeiq.com/ http://www.placeiq.com/
Paul Brenner
https://twitter.com/placeiq https://twitter.com/placeiq https://twitter.com/placeiq
https://www.facebook.com/PlaceIQ https://www.facebook.com/PlaceIQ
https://www.linkedin.com/company/placeiq https://www.linkedin.com/company/placeiq
DATA SCIENTIST
tel:(217)%20390-3033
http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/ http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/ http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/
On Thu, Apr 20, 2017 at 8:49 PM moon soo Lee
<
mailto:moon+soo+Lee+%3Cmoon@apache.org%3E
> wrote:
Hi,
If you remove
'default.user'
'default.password'
properties from jdbc interpreter setting, then Zeppelin will use database username and password from credential database for each user.
I also created a patch [1] to use credential database when 'default'.user' and 'default.password' is empty string.
Hope this helps.
Best,
moon
[1]
https://github.com/apache/zeppelin/pull/2269
On Mon, Apr 10, 2017 at 3:37 AM Arpad Beregszaszi <
mailto:arpad.beregszaszi@gmx.de
> wrote:
Hi all,
I’m pretty new with Zeppeln and I need help with one problem regarding data source authorization as its described here:
https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.html
I can successfully connect Zeppelin to my MySQL Server. Now I want to give different users access to their databases.
For that I want the JDBC interpreter to use different database credentials, depending on the Zeppelin user as defined in shiro.ini.
But when I create credential information, the JDBC interpreter doesn’t use them for the db connection, but the default username and password, which is empty.
My Interpreter Is instantiated per user.
Java.sql.SQLException: Access denied for user ‘ ‘ @ ‘IP‘ (using password: NO)
Anyone an idea of whats wrong?
Thanks, Arpad
Re: Data Source Authorization - JDBC Credential
Posted by moon soo Lee <mo...@apache.org>.
Hi,
Which version of Zeppelin are you using? Have you tried remove
'default.user' and 'default.password' property from interpreter menu and
create entity in credential menu?
Thanks,
moon
On Fri, Apr 21, 2017 at 11:55 AM Paul Brenner <pb...@placeiq.com> wrote:
> Are credentials confirmed working with the JDBC interpreter? I’m trying to
> get jdbc working with snowflake. If I hardcore my username and password
> into the default url everything works great… but this of course won’t work
> in a multi user environment.
>
> However, if I try to use default username, default password, or zeppelin
> credentials I get stuck at "java.sql.SQLException: Missing user name.”
>
> Sounds like a different issue than the OP.
>
> <http://www.placeiq.com/> <http://www.placeiq.com/>
> <http://www.placeiq.com/> Paul Brenner <https://twitter.com/placeiq>
> <https://twitter.com/placeiq> <https://twitter.com/placeiq>
> <https://www.facebook.com/PlaceIQ> <https://www.facebook.com/PlaceIQ>
> <https://www.linkedin.com/company/placeiq>
> <https://www.linkedin.com/company/placeiq>
> DATA SCIENTIST
> *(217) 390-3033 <(217)%20390-3033> *
>
> <http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/>
> <http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/>
> <http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP>
> <http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/>
> <http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/>[image:
> PlaceIQ:Location Data Accuracy]
> <http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/>
>
> On Thu, Apr 20, 2017 at 8:49 PM moon soo Lee <moon soo Lee
> <moon+soo+Lee+%3Cmoon@apache.org%3E>> wrote:
>
>> Hi,
>>
>> If you remove
>>
>> 'default.user'
>> 'default.password'
>>
>> properties from jdbc interpreter setting, then Zeppelin will use database
>> username and password from credential database for each user.
>>
>> I also created a patch [1] to use credential database when
>> 'default'.user' and 'default.password' is empty string.
>>
>> Hope this helps.
>>
>> Best,
>> moon
>>
>> [1] https://github.com/apache/zeppelin/pull/2269
>>
>> On Mon, Apr 10, 2017 at 3:37 AM Arpad Beregszaszi <
>> arpad.beregszaszi@gmx.de> wrote:
>>
>>> Hi all,
>>>
>>>
>>>
>>> I’m pretty new with Zeppeln and I need help with one problem regarding
>>> data source authorization as its described here:
>>>
>>>
>>>
>>>
>>> https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.html
>>>
>>>
>>>
>>> I can successfully connect Zeppelin to my MySQL Server. Now I want to
>>> give different users access to their databases.
>>>
>>> For that I want the JDBC interpreter to use different database
>>> credentials, depending on the Zeppelin user as defined in shiro.ini.
>>>
>>> But when I create credential information, the JDBC interpreter doesn’t
>>> use them for the db connection, but the default username and password,
>>> which is empty.
>>>
>>> My Interpreter Is instantiated per user.
>>>
>>>
>>>
>>> Java.sql.SQLException: Access denied for user ‘ ‘ @ ‘IP‘ (using
>>> password: NO)
>>>
>>>
>>>
>>> Anyone an idea of whats wrong?
>>>
>>> Thanks, Arpad
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>
Re: Data Source Authorization - JDBC Credential
Posted by Paul Brenner <pb...@placeiq.com>.
Are credentials confirmed working with the JDBC interpreter? I’m trying to get jdbc working with snowflake. If I hardcore my username and password into the default url everything works great… but this of course won’t work in a multi user environment.
However, if I try to use default username, default password, or zeppelin credentials I get stuck at "
java.sql.SQLException: Missing user name.”
Sounds like a different issue than the OP.
http://www.placeiq.com/ http://www.placeiq.com/ http://www.placeiq.com/
Paul Brenner
https://twitter.com/placeiq https://twitter.com/placeiq https://twitter.com/placeiq
https://www.facebook.com/PlaceIQ https://www.facebook.com/PlaceIQ
https://www.linkedin.com/company/placeiq https://www.linkedin.com/company/placeiq
DATA SCIENTIST
(217) 390-3033
http://www.placeiq.com/2015/05/26/placeiq-named-winner-of-prestigious-2015-oracle-data-cloud-activate-award/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2015/12/18/accuracy-vs-precision-in-location-data-mma-webinar/ http://placeiq.com/2016/03/08/measuring-addressable-tv-campaigns-is-now-possible/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://placeiq.com/2016/04/13/placeiq-joins-the-network-advertising-initiative-nai-as-100th-member/ http://pages.placeiq.com/Location-Data-Accuracy-Whitepaper-Download.html?utm_source=Signature&utm_medium=Email&utm_campaign=AccuracyWP http://placeiq.com/2016/08/03/placeiq-bolsters-location-intelligence-platform-with-mastercard-insights/ http://placeiq.com/2016/10/26/the-making-of-a-location-data-industry-milestone/ http://placeiq.com/2016/12/07/placeiq-introduces-landmark-a-groundbreaking-offering-that-delivers-access-to-the-highest-quality-location-data-for-insights-that-fuel-limitless-business-decisions/
On Thu, Apr 20, 2017 at 8:49 PM moon soo Lee
<
mailto:moon soo Lee <mo...@apache.org>
> wrote:
a, pre, code, a:link, body { word-wrap: break-word !important; }
Hi,
If you remove
'default.user'
'default.password'
properties from jdbc interpreter setting, then Zeppelin will use database username and password from credential database for each user.
I also created a patch [1] to use credential database when 'default'.user' and 'default.password' is empty string.
Hope this helps.
Best,
moon
[1]
https://github.com/apache/zeppelin/pull/2269
On Mon, Apr 10, 2017 at 3:37 AM Arpad Beregszaszi <
mailto:arpad.beregszaszi@gmx.de
> wrote:
Hi all,
I’m pretty new with Zeppeln and I need help with one problem regarding data source authorization as its described here:
https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.html
I can successfully connect Zeppelin to my MySQL Server. Now I want to give different users access to their databases.
For that I want the JDBC interpreter to use different database credentials, depending on the Zeppelin user as defined in shiro.ini.
But when I create credential information, the JDBC interpreter doesn’t use them for the db connection, but the default username and password, which is empty.
My Interpreter Is instantiated per user.
Java.sql.SQLException: Access denied for user ‘ ‘ @ ‘IP‘ (using password: NO)
Anyone an idea of whats wrong?
Thanks, Arpad
Re: Data Source Authorization - JDBC Credential
Posted by moon soo Lee <mo...@apache.org>.
Hi,
If you remove
'default.user'
'default.password'
properties from jdbc interpreter setting, then Zeppelin will use database
username and password from credential database for each user.
I also created a patch [1] to use credential database when 'default'.user'
and 'default.password' is empty string.
Hope this helps.
Best,
moon
[1] https://github.com/apache/zeppelin/pull/2269
On Mon, Apr 10, 2017 at 3:37 AM Arpad Beregszaszi <ar...@gmx.de>
wrote:
> Hi all,
>
>
>
> I’m pretty new with Zeppeln and I need help with one problem regarding
> data source authorization as its described here:
>
>
>
>
> https://zeppelin.apache.org/docs/0.7.0/security/datasource_authorization.html
>
>
>
> I can successfully connect Zeppelin to my MySQL Server. Now I want to give
> different users access to their databases.
>
> For that I want the JDBC interpreter to use different database
> credentials, depending on the Zeppelin user as defined in shiro.ini.
>
> But when I create credential information, the JDBC interpreter doesn’t use
> them for the db connection, but the default username and password, which is
> empty.
>
> My Interpreter Is instantiated per user.
>
>
>
> Java.sql.SQLException: Access denied for user ‘ ‘ @ ‘IP‘ (using password:
> NO)
>
>
>
> Anyone an idea of whats wrong?
>
> Thanks, Arpad
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>