question Re: SASLException: Phoenix Connectivity in Support Questions

SASLException: Phoenix Connectivity

sind65 — Tue, 23 Jan 2024 05:35:03 GMT

Facing above exception when connecting to Phoenix :

Facing above exception when connecting to Phoenix

failed on local exception: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] [Caused by javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]]

Using below Phoenix jars with version :

phoenix-5.0.0-cdh6.2.0-client.jar

phoenix5-spark-6.0.0.7.1.8.44-1.jar

phoenix-spark-5.0.0-cdh6.2.0.jar

Scala : 2.4.0

Spark : 2.11

Re: SASLException: Phoenix Connectivity

sind65 — Tue, 23 Jan 2024 05:37:01 GMT

The application is working fine on CDP but while using the same with ozone we are getting kerberos issue

Re: SASLException: Phoenix Connectivity

sind65 — Tue, 23 Jan 2024 05:39:34 GMT

Caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]

Re: SASLException: Phoenix Connectivity

RangaReddy — Tue, 23 Jan 2024 05:51:44 GMT

Hi @sind65

Could you please clarify few things before proceeding any solutions:

1. Are you using CDP or CDH?

2. How are you submitting the spark job?

3. Are you using kinit or you have specified principal/keytab?

4. Have you followed the following documentation to setup and run the sample example

https://community.cloudera.com/t5/Community-Articles/Spark-Ozone-Integration-in-CDP/ta-p/323132

Re: SASLException: Phoenix Connectivity

sind65 — Thu, 25 Jan 2024 17:18:42 GMT

HI Ranga,

Thank you for the reply, Please find my answers below:

1. We are working on CDP.

2. Spark submit is submitted with the cache file, property files and java options. Please let me know if i need to share more details.

3. We are using principal and kerberos cache

4. The below article has been followed and the configuration i have validated

We are using "authentication=SPENGO" and the phoenix string(phoenixurl in code) is as below:

<ZK>:2181;authentication=SPNEGO/hbase-secure:<principal>:<cache>

We are using the above phoenix string with the code below:

dataset.write().format("org.apache.phoenix.spark").mode(SaveMode.Overwrite)
        .option("table",tableName.concat(row.get(0).toString()))
        .option("zkUrl",phoenixurl)
        .save();

The same above is working fine on CDP, when we migrate the same app on the hadoop instance enabled with ozone. we have above issue w.r.t kerberos.

Please support.. Looking forward for your suggestion