You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Michael Ho (JIRA)" <ji...@apache.org> on 2018/11/14 19:50:00 UTC
[jira] [Updated] (IMPALA-4709) [KERBEROS] Improve the error message
for impala-shell on Kerberised environment with LoadBalancer
[ https://issues.apache.org/jira/browse/IMPALA-4709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Ho updated IMPALA-4709:
-------------------------------
Labels: kerberos (was: )
> [KERBEROS] Improve the error message for impala-shell on Kerberised environment with LoadBalancer
> -------------------------------------------------------------------------------------------------
>
> Key: IMPALA-4709
> URL: https://issues.apache.org/jira/browse/IMPALA-4709
> Project: IMPALA
> Issue Type: Improvement
> Components: Security
> Affects Versions: Impala 2.2.4
> Reporter: Oleg Viaz
> Priority: Major
> Labels: kerberos
>
> When Load Balancer is enabled in then cluster - and user (in the Kerberised environment) is trying to connect to impala-shell, the error message is very uninformative:
> {code}
> $ kinit user_a
> $ impala-shell -k
> Starting Impala Shell using Kerberos authentication
> Using service name 'impala'
> Error connecting: TTransportException, TSocket read 0 bytes
> ***********************************************************************************
> Welcome to the Impala shell. Copyright (c) 2015 Cloudera, Inc. All rights reserved.
> (Impala Shell v2.4.0-cdh5.6.0 (386c7ff) built on Thu Jan 28 21:19:43 PST 2016)
> Press TAB twice to see a list of available commands.
> ***********************************************************************************
> [Not connected] > exit;
> {code}
> As mentioned, the above issue affects Kerberised clusters with Load Balancer (!) enabled.
> If possible - it would be good to have a better error message advising to provide the actual LB address in the command line.
> Basically it would be good if impala can detect that Load Balancer is setup with Kerberos, so any request to individual impala daemon (default, when "-i" *is not* provided in the impala-shell parameters) should give proper message
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org