question Re: How to pass user with Phoenix url? in Archives of Support Questions (Read Only)

How to pass user with Phoenix url?

hfaouaz — Sat, 07 Nov 2015 01:46:09 GMT

Currently Have Hbase protected by Ranger. I am not able to connect to Hbase via Phoenix from an external java client since its picking up my machine userid and that is not an authorized user. Is there a way to pass in the user in phoenix connection url?

Re: How to pass user with Phoenix url?

TerryP — Sat, 07 Nov 2015 02:02:40 GMT

Is Kerberos also in play? The docs page here gives an example for connecting with the HBase service principal.

Have you tried a connection URL like?

jdbc:phoenix:<Zookeeper_host_name>:<port_number>:<secured_Zookeeper_node>:<user_name>

Re: How to pass user with Phoenix url?

hfaouaz — Sat, 07 Nov 2015 02:14:21 GMT

my cluster is not yet secured. so I have non secure zooker node.

I tried this:

"jdbc:phoenix:<zookeper-host>:2181:/hbase-unsecure:<uid>"

but no luck. would that work with non-secure zookeeper node?

Re: How to pass user with Phoenix url?

elserj — Sat, 07 Nov 2015 02:26:43 GMT

It should work even without Kerberos. I'm not sure how the Ranger authorization fits into the picture.

Re: How to pass user with Phoenix url?

nsabharwal — Sun, 08 Nov 2015 21:06:43 GMT

@Josh Elser @terry@hortonworks.com

@hfaouaz@hortonworks.com

Please see this.

[root@nsfed01 ~]# /usr/hdp/2.3.2.0-2950/phoenix/bin/sqlline.py n1:2181:/hbase-unsecure:neeraj

Setting property: [isolation, TRANSACTION_READ_COMMITTED]

issuing: !connect jdbc:phoenix:n1:2181:/hbase-unsecure:neeraj none none org.apache.phoenix.jdbc.PhoenixDriver

Connecting to jdbc:phoenix:n1:2181:/hbase-unsecure:neeraj

15/11/08 05:04:50 WARN util.NativeCodeLoader: Unable to load native-hadoop library for your platform... using builtin-java classes where applicable

15/11/08 05:04:51 WARN impl.MetricsConfig: Cannot locate configuration: tried hadoop-metrics2-phoenix.properties,hadoop-metrics2.properties

Connected to: Phoenix (version 4.4)

Driver: PhoenixEmbeddedDriver (version 4.4)

Autocommit status: true

Transaction isolation: TRANSACTION_READ_COMMITTED

Building list of tables and columns for tab-completion (set fastconnect to true to skip)...

93/93 (100%) Done

Done

sqlline version 1.1.8

0: jdbc:phoenix:n1:2181:/hbase-unsecure:neera>

0: jdbc:phoenix:n1:2181:/hbase-unsecure:neera> !list

1 active connection:

#0 open jdbc:phoenix:n1:2181:/hbase-unsecure:neeraj

0: jdbc:phoenix:n1:2181:/hbase-unsecure:neera>

Re: How to pass user with Phoenix url?

hfaouaz — Tue, 10 Nov 2015 22:52:46 GMT

thanks @Neeraj. this helps from the command line, though if I want to do it from java, the client is still picking up the computer username not that one you pass in...

Re: How to pass user with Phoenix url?

nsabharwal — Tue, 10 Nov 2015 22:57:23 GMT

@hfaouaz@hortonworks.com

Good example

Example

You may have pass username with in the Java call

Re: How to pass user with Phoenix url?

nsabharwal — Thu, 12 Nov 2015 04:39:18 GMT

@hfaouaz@hortonworks.com

Kerberos is your best bet.

Now, without kerberos

You have to login as that particular user to run java program.

example: Based on testing in my lab env.

login as OS user, for example user abc and if you are dealing with ranger then make sure that os user has permission in HBase policies.

Conclusion: Phoenix is picking up OS user as user opening the connection.

Re: How to pass user with Phoenix url?

hfaouaz — Thu, 12 Nov 2015 04:42:46 GMT

yep I agree. thanks for the follow up.