You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "xujian (JIRA)" <ji...@apache.org> on 2018/10/22 09:20:00 UTC
[jira] [Updated] (IMPALA-3187) Impala with Kerberos jdbc connect
error
[ https://issues.apache.org/jira/browse/IMPALA-3187?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
xujian updated IMPALA-3187:
---------------------------
Attachment: image-2018-10-22-17-19-36-031.png
> Impala with Kerberos jdbc connect error
> ---------------------------------------
>
> Key: IMPALA-3187
> URL: https://issues.apache.org/jira/browse/IMPALA-3187
> Project: IMPALA
> Issue Type: Bug
> Components: Security
> Affects Versions: Impala 2.2.1
> Reporter: nilone
> Priority: Major
> Attachments: image-2018-10-22-17-19-36-031.png
>
>
> when I use beeline connect to impalad server , failed to connect ,
> command is : +beeline -u "jdbc:hive2://bd-131:21050/;principal=impala/bd-131@MYCDH"+
> check impalad log ,show error:
> E0316 23:33:07.934474 18988 authentication.cc:148] SASL message (Kerberos (external)): GSSAPI Error: Unspecified GSS failure. Minor code may provide more information ({color:red}Encryption type DES cbc mode with CRC-32 not permitted{color})
> I0316 23:33:07.935238 18988 thrift-util.cc:109] TThreadPoolServer: TServerTransport died on accept: SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context
> ---------------------------------------------------------------------------------------------------------
> *this is my kerberos ticket info:*
> [root@bd-131 CDH5Test]# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: impala/bd-131@MYCDH
> Valid starting Expires Service principal
> 03/16/16 23:34:36 03/17/16 23:34:25 krbtgt/MYCDH@MYCDH
> renew until 03/21/16 23:34:36
>
> *I init ticket from this keytab file generated by Cloudera Manager*
> [root@bd-131 CDH5Test]# klist -k -e /var/run/cloudera-scm-agent/process/697-impala-IMPALAD/impala.keytab
> Keytab name: FILE:/var/run/cloudera-scm-agent/process/697-impala-IMPALAD/impala.keytab
> KVNO Principal
> ---- --------------------------------------------------------------------------
> 2 impala/bd-131@MYCDH (aes256-cts-hmac-sha1-96)
> 2 impala/bd-131@MYCDH (aes128-cts-hmac-sha1-96)
> 2 impala/bd-131@MYCDH (des3-cbc-sha1)
> 2 impala/bd-131@MYCDH (arcfour-hmac)
> 2 impala/bd-131@MYCDH (des-hmac-sha1)
> 2 impala/bd-131@MYCDH (des-cbc-md5)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org