11-07-2016 10:37 PM - last edited on 11-08-2016 05:55 AM by cjervis
I have a custom Parcel/CSD which I need to install on a kerberized cluster. I have followed the Cloudera documentation and added the principal in the CSD and the ticket is correctly acquired for my user. This works fine for HDFS, however fails for HBASE with the error:
org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions (user=testuser/my.instance.com@EXAMPLE.COM, scope=default, params=[namespace=default,table=default:TEST,family=|NAME|AGE],action=CREATE)
How do I grant the required hbase-access to my user programatically through the CSD? Is there a way I can retrieve the HBASE-keytab along with the HBASE-principal programatically in my control script or through the service descriptor and call kinit on it?