Error when connect to impala with JDBC under kerberos authrication

by

Forget about the Hadoop UGI: a JDBC driver just needs the raw JAAS configuration to create a Kerberos ticket on-the-fly (with useKeyTab raised and useTicketCache lowered).

System properties

  • java.security.krb5.conf => (optional) non-defaut Kerberos conf
  • java.security.auth.login.config => JAAS config file
  • javax.security.auth.useSubjectCredsOnly => must be forced to “false” (the default has changed in some Java release, duh)

Sample JAAS conf file, Impala/Hive Cloudera drivers
Here with a Windows path in Java-style notation.

Client {
  com.sun.security.auth.module.Krb5LoginModule
    required
  useTicketCache=false
  doNotPrompt=true
  useKeyTab=true
  keyTab="file:C:/blah/blah/dummy.keytab"
  principal="[email protected]"
  debug=false;
};

Sample JAAS conf file, Apache Hive driver
Just change section name from Client to com.sun.security.jgss.krb5.initiate
PS: you can stuff multiple sections in the same conf file; this means that you can define a “global” conf and use it with multiple tools & drivers & libs, with consistent settings.

Debugging

  • sun.security.krb5.debug => set to “true”
  • java.security.debug=> set to “gssloginconfig,configfile,configparser,logincontext”

More Related Contents:

  1. Set cookies for cross origin requests
  2. What’s the difference between OpenID and OAuth?
  3. Authentication filter and servlet for login
  4. How to secure MongoDB with username and password
  5. How can I extend ServiceStack Authentication
  6. Handling Browser Authentication using Selenium
  7. Socket.IO Authentication
  8. user authentication libraries for node.js?
  9. Forgot Password: what is the best method of implementing a forgot password function?
  10. Authentication with 2 different tables
  11. How to use UrlFetchApp with credentials? Google Scripts
  12. LDAP: error code 49 – 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1
  13. What if JWT is stolen?
  14. Token Authentication vs. Cookies
  15. How does cookie based authentication work?
  16. CSRF Token necessary when using Stateless(= Sessionless) Authentication?
  17. Why are cookies unrecognized when a link is clicked from an external source (i.e. Excel, Word, etc…)
  18. Is Facebook an OpenID provider?
  19. REST API Token-based Authentication
  20. Sending cookie session id with Swagger 3.0
  21. In Subversion can I be a user other than my login name?
  22. Spring security: adding “On successful login event listener”
  23. No route matches [GET] “/users/sign_out”
  24. Single sign-on flow using JWT for cross domain authentication
  25. Where can I find a list of OpenID Provider URLs? [closed]
  26. ASP.NET MVC 3 using Authentication
  27. Customize Authentication – Login Symfony2 Messages
  28. Trouble getting ClaimsPrincipal populated when using EasyAuth to authenticate against AAD on Azure App Service in a Asp.Net Core web app
  29. Web API 2, OWIN Authentication, SignOut doesn’t logout
  30. How can I use persisted cookies from a file using phantomjs

Leave a Comment