Thanks Nkechi, Can you please direct me to some code snippet with hbase on spark module? I've been trying that for last few days but did not found a workaround.
On Tue, Aug 9, 2016 at 6:13 PM, Nkechi Achara <nkach...@googlemail.com> wrote: > Hey, > > Have you tried hbase on spark module, or the spark-hbase module to connect? > The principal and keytab options should work out of the box for kerberized > access. I can attempt your code if you don't have the ability to use those > modules. > > Thanks > K > > On 9 Aug 2016 2:25 p.m., "Aneela Saleem" <ane...@platalytics.com> wrote: > > > Hi all, > > > > I'm trying to connect to Hbase with security enabled using spark job. I > > have kinit'd from command line. When i run the following job i.e., > > > > /usr/local/spark-2/bin/spark-submit --keytab > /etc/hadoop/conf/spark.keytab > > --principal spark/hadoop-master@platalyticsrealm --class > > com.platalytics.example.spark.App --master yarn --driver-class-path > > /root/hbase-1.2.2/conf /home/vm6/project-1-jar-with-dependencies.jar > > > > I get the error: > > > > 2016-08-07 20:43:57,617 WARN > > [hconnection-0x24b5fa45-metaLookup-shared--pool2-t1] > > ipc.RpcClientImpl: Exception encountered while connecting to the server : > > javax.security.sasl.SaslException: GSS initiate failed [Caused by > > GSSException: No valid credentials provided (Mechanism level: Failed to > > find any Kerberos tgt)] 2016-08-07 20:43:57,619 ERROR > > [hconnection-0x24b5fa45-metaLookup-shared--pool2-t1] ipc.RpcClientImpl: > > SASL authentication failed. The most likely cause is missing or invalid > > credentials. Consider 'kinit'. javax.security.sasl.SaslException: GSS > > initiate failed [Caused by GSSException: No valid credentials provided > > (Mechanism level: Failed to find any Kerberos tgt)] at > > com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge( > > GssKrb5Client.java:212) > > at org.apache.hadoop.hbase.security.HBaseSaslRpcClient.saslConnect( > > HBaseSaslRpcClient.java:179) > > at org.apache.hadoop.hbase.ipc.RpcClientImpl$Connection. > > setupSaslConnection(RpcClientImpl.java:617) > > at org.apache.hadoop.hbase.ipc.RpcClientImpl$Connection. > > access$700(RpcClientImpl.java:162) at org.apache.hadoop.hbase.ipc. > > RpcClientImpl$Connection$2.run(RpcClientImpl.java:743) > > > > Following is my code: > > > > System.setProperty("java.security.krb5.conf", "/etc/krb5.conf"); > > System.setProperty("java.security.auth.login.config", > > "/etc/hbase/conf/zk-jaas.conf"); > > > > val hconf = HBaseConfiguration.create() > > val tableName = "emp" > > hconf.set("hbase.zookeeper.quorum", "hadoop-master") > > hconf.set(TableInputFormat.INPUT_TABLE, tableName) > > hconf.set("hbase.zookeeper.property.clientPort", "2181") > > hconf.set("hadoop.security.authentication", "kerberos") > > hconf.set("hbase.security.authentication", "kerberos") > > hconf.addResource(new Path("/etc/hbase/conf/core-site.xml")) > > hconf.addResource(new Path("/etc/hbase/conf/hbase-site.xml")) > > UserGroupInformation.setConfiguration(hconf) > > val keyTab = "/etc/hadoop/conf/spark.keytab" > > val ugi = UserGroupInformation.loginUserFromKeytabAndReturnUG > > I("spark/hadoop-master@platalyticsrealm", keyTab) > > UserGroupInformation.setLoginUser(ugi) > > ugi.doAs(new PrivilegedExceptionAction[Void]() { > > override def run(): Void = { > > val conf = new SparkConf > > val sc = new SparkContext(conf) > > sc.addFile(keyTab) > > var hBaseRDD = sc.newAPIHadoopRDD(hconf, classOf[TableInputFormat], > > classOf[org.apache.hadoop.hbase.io.ImmutableBytesWritable], > > classOf[org.apache.hadoop.hbase.client.Result]) > > println("Number of Records found : " + hBaseRDD.count()) > > hBaseRDD.foreach(x => { > > println(new String(x._2.getRow())) > > }) > > sc.stop() > > return null > > } > > }) > > > > Please have a look. And help me try finding the issue. > > > > Thanks > > >