You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@phoenix.apache.org by anung <an...@gmail.com> on 2018/08/01 03:39:42 UTC
Re: jdbc not work, phoenix 4.14.0-cdh5.11.2 + kerberos
Hi Josh,
thank you for replying.
This is an excerpt from the debug log:
the client can connected to Zookeeper successfully:
....
2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo - Trying
to connect to a secure cluster as anung@REALM.COM with keytab
/Users/anung/anung.keytab
2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo -
Successful login to secure cluster
....
2018-08-01 10:21:17,351 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn - Socket
connection established, initiating session, client:
/10.30.250.156:50181, server: ZKnode:2181
2018-08-01 10:21:17,354 [pool-1-thread-1-SendThread(ZKnode:2181)]
DEBUG org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn -
Session establishment request sent on ZKnode:2181
2018-08-01 10:21:17,376 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn - Session
establishment complete on server ZKnode:2181, sessionid =
0x364e0801fa52086, negotiated timeout = 60000
2018-08-01 10:21:17,380 [pool-1-thread-1-EventThread] DEBUG
org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher -
hconnection-0x25f652be0x0, quorum=ZKnode:2181, baseZNode=/hbase
Received ZooKeeper Event, type=None, state=SyncConnected, path=null
2018-08-01 10:21:17,384 [pool-1-thread-1-EventThread] DEBUG
org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher -
hconnection-0x25f652be-0x364e0801fa52086 connected
...
but somehow HBase auth using SIMPLE instead of Kerberos:
...
2018-08-01 10:21:22,744 [hconnection-0x25f652be-shared--pool1-t1]
DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl - Use SIMPLE
authentication for service ClientService, sasl=false
2018-08-01 10:21:22,826 [hconnection-0x25f652be-shared--pool1-t1]
DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl - Connecting to
Regionserver:60020
...
2018-08-01 10:22:12,649 [pool-1-thread-1] DEBUG
org.apache.hadoop.hbase.client.ResultBoundedCompletionService -
Replica 0 returns java.net.SocketTimeoutException: callTimeout=60000,
callDuration=70972: row 'SYSTEM:CATALOG,,' on table 'hbase:meta' at
region=hbase:meta,,1.1588230740,
hostname=Regionserver,60020,1533093258500, seqNum=0
...
Thank you,
BR,
Anung
On Wed, Aug 1, 2018 at 1:50 AM Josh Elser <el...@apache.org> wrote:
>
> Did you enable DEBUG logging on the client or server side? Certainly if
> you got a connection timeout, you at least got a stack trace that you
> could share.
>
> You need to provide more information if you want help debugging your setup.
>
> On 7/31/18 6:29 AM, anung wrote:
> > Hi All,
> >
> > I have CDH 5.11 cluster (kerberized, but HBase is not yet secured),
> > installed Phoenix 4.14.0-cdh5.11.2 parcel method, test the JDBC
> > connection and succeed.
> > I can query, create table, drop table etc.
> >
> > And then I enabling kerberos security in HBase, restart service, and
> > JDBC Phoenix is dead. Connection timeout. Just that, no other
> > information.
> >
> > JDBC connection string:
> >
> > jdbc:phoenix:node1,node2,node3:2181:/hbase:anung@REALM.COM:/home/anung/anung.keytab
> >
> > I try kinit and use sqlline in the datanode and edgenode and yes
> > Phoenix is working.
> >
> > is there something missing in my end?
> >
> > Thank you
> >
> > BR,
> > Anung
> >
Re: jdbc not work, phoenix 4.14.0-cdh5.11.2 + kerberos
Posted by anung <an...@gmail.com>.
Awesome Josh, now I can connect!!
Thank you
BR,
Anung
On Thu, Aug 2, 2018 at 1:55 AM Josh Elser <el...@apache.org> wrote:
>
> Make sure you have the correct hbase-site.xml on the classpath of your
> application. This is how HBase client code knows to use Kerberos to
> authenticate.
>
> On 7/31/18 11:39 PM, anung wrote:
> > Hi Josh,
> >
> > thank you for replying.
> >
> > This is an excerpt from the debug log:
> >
> > the client can connected to Zookeeper successfully:
> > ....
> > 2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
> > org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo - Trying
> > to connect to a secure cluster as anung@REALM.COM with keytab
> > /Users/anung/anung.keytab
> > 2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
> > org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo -
> > Successful login to secure cluster
> > ....
> > 2018-08-01 10:21:17,351 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
> > org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn - Socket
> > connection established, initiating session, client:
> > /10.30.250.156:50181, server: ZKnode:2181
> > 2018-08-01 10:21:17,354 [pool-1-thread-1-SendThread(ZKnode:2181)]
> > DEBUG org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn -
> > Session establishment request sent on ZKnode:2181
> > 2018-08-01 10:21:17,376 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
> > org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn - Session
> > establishment complete on server ZKnode:2181, sessionid =
> > 0x364e0801fa52086, negotiated timeout = 60000
> > 2018-08-01 10:21:17,380 [pool-1-thread-1-EventThread] DEBUG
> > org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher -
> > hconnection-0x25f652be0x0, quorum=ZKnode:2181, baseZNode=/hbase
> > Received ZooKeeper Event, type=None, state=SyncConnected, path=null
> > 2018-08-01 10:21:17,384 [pool-1-thread-1-EventThread] DEBUG
> > org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher -
> > hconnection-0x25f652be-0x364e0801fa52086 connected
> > ...
> >
> > but somehow HBase auth using SIMPLE instead of Kerberos:
> > ...
> > 2018-08-01 10:21:22,744 [hconnection-0x25f652be-shared--pool1-t1]
> > DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl - Use SIMPLE
> > authentication for service ClientService, sasl=false
> > 2018-08-01 10:21:22,826 [hconnection-0x25f652be-shared--pool1-t1]
> > DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl - Connecting to
> > Regionserver:60020
> > ...
> > 2018-08-01 10:22:12,649 [pool-1-thread-1] DEBUG
> > org.apache.hadoop.hbase.client.ResultBoundedCompletionService -
> > Replica 0 returns java.net.SocketTimeoutException: callTimeout=60000,
> > callDuration=70972: row 'SYSTEM:CATALOG,,' on table 'hbase:meta' at
> > region=hbase:meta,,1.1588230740,
> > hostname=Regionserver,60020,1533093258500, seqNum=0
> > ...
> >
> >
> > Thank you,
> >
> > BR,
> > Anung
> >
> >
> > On Wed, Aug 1, 2018 at 1:50 AM Josh Elser <el...@apache.org> wrote:
> >>
> >> Did you enable DEBUG logging on the client or server side? Certainly if
> >> you got a connection timeout, you at least got a stack trace that you
> >> could share.
> >>
> >> You need to provide more information if you want help debugging your setup.
> >>
> >> On 7/31/18 6:29 AM, anung wrote:
> >>> Hi All,
> >>>
> >>> I have CDH 5.11 cluster (kerberized, but HBase is not yet secured),
> >>> installed Phoenix 4.14.0-cdh5.11.2 parcel method, test the JDBC
> >>> connection and succeed.
> >>> I can query, create table, drop table etc.
> >>>
> >>> And then I enabling kerberos security in HBase, restart service, and
> >>> JDBC Phoenix is dead. Connection timeout. Just that, no other
> >>> information.
> >>>
> >>> JDBC connection string:
> >>>
> >>> jdbc:phoenix:node1,node2,node3:2181:/hbase:anung@REALM.COM:/home/anung/anung.keytab
> >>>
> >>> I try kinit and use sqlline in the datanode and edgenode and yes
> >>> Phoenix is working.
> >>>
> >>> is there something missing in my end?
> >>>
> >>> Thank you
> >>>
> >>> BR,
> >>> Anung
> >>>
Re: jdbc not work, phoenix 4.14.0-cdh5.11.2 + kerberos
Posted by Josh Elser <el...@apache.org>.
Make sure you have the correct hbase-site.xml on the classpath of your
application. This is how HBase client code knows to use Kerberos to
authenticate.
On 7/31/18 11:39 PM, anung wrote:
> Hi Josh,
>
> thank you for replying.
>
> This is an excerpt from the debug log:
>
> the client can connected to Zookeeper successfully:
> ....
> 2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
> org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo - Trying
> to connect to a secure cluster as anung@REALM.COM with keytab
> /Users/anung/anung.keytab
> 2018-08-01 10:21:15,987 [pool-1-thread-1] INFO
> org.apache.phoenix.jdbc.PhoenixEmbeddedDriver$ConnectionInfo -
> Successful login to secure cluster
> ....
> 2018-08-01 10:21:17,351 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
> org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn - Socket
> connection established, initiating session, client:
> /10.30.250.156:50181, server: ZKnode:2181
> 2018-08-01 10:21:17,354 [pool-1-thread-1-SendThread(ZKnode:2181)]
> DEBUG org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn -
> Session establishment request sent on ZKnode:2181
> 2018-08-01 10:21:17,376 [pool-1-thread-1-SendThread(ZKnode:2181)] INFO
> org.apache.phoenix.shaded.org.apache.zookeeper.ClientCnxn - Session
> establishment complete on server ZKnode:2181, sessionid =
> 0x364e0801fa52086, negotiated timeout = 60000
> 2018-08-01 10:21:17,380 [pool-1-thread-1-EventThread] DEBUG
> org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher -
> hconnection-0x25f652be0x0, quorum=ZKnode:2181, baseZNode=/hbase
> Received ZooKeeper Event, type=None, state=SyncConnected, path=null
> 2018-08-01 10:21:17,384 [pool-1-thread-1-EventThread] DEBUG
> org.apache.hadoop.hbase.zookeeper.ZooKeeperWatcher -
> hconnection-0x25f652be-0x364e0801fa52086 connected
> ...
>
> but somehow HBase auth using SIMPLE instead of Kerberos:
> ...
> 2018-08-01 10:21:22,744 [hconnection-0x25f652be-shared--pool1-t1]
> DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl - Use SIMPLE
> authentication for service ClientService, sasl=false
> 2018-08-01 10:21:22,826 [hconnection-0x25f652be-shared--pool1-t1]
> DEBUG org.apache.hadoop.hbase.ipc.RpcClientImpl - Connecting to
> Regionserver:60020
> ...
> 2018-08-01 10:22:12,649 [pool-1-thread-1] DEBUG
> org.apache.hadoop.hbase.client.ResultBoundedCompletionService -
> Replica 0 returns java.net.SocketTimeoutException: callTimeout=60000,
> callDuration=70972: row 'SYSTEM:CATALOG,,' on table 'hbase:meta' at
> region=hbase:meta,,1.1588230740,
> hostname=Regionserver,60020,1533093258500, seqNum=0
> ...
>
>
> Thank you,
>
> BR,
> Anung
>
>
> On Wed, Aug 1, 2018 at 1:50 AM Josh Elser <el...@apache.org> wrote:
>>
>> Did you enable DEBUG logging on the client or server side? Certainly if
>> you got a connection timeout, you at least got a stack trace that you
>> could share.
>>
>> You need to provide more information if you want help debugging your setup.
>>
>> On 7/31/18 6:29 AM, anung wrote:
>>> Hi All,
>>>
>>> I have CDH 5.11 cluster (kerberized, but HBase is not yet secured),
>>> installed Phoenix 4.14.0-cdh5.11.2 parcel method, test the JDBC
>>> connection and succeed.
>>> I can query, create table, drop table etc.
>>>
>>> And then I enabling kerberos security in HBase, restart service, and
>>> JDBC Phoenix is dead. Connection timeout. Just that, no other
>>> information.
>>>
>>> JDBC connection string:
>>>
>>> jdbc:phoenix:node1,node2,node3:2181:/hbase:anung@REALM.COM:/home/anung/anung.keytab
>>>
>>> I try kinit and use sqlline in the datanode and edgenode and yes
>>> Phoenix is working.
>>>
>>> is there something missing in my end?
>>>
>>> Thank you
>>>
>>> BR,
>>> Anung
>>>