Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

CDH 5.15 upgrade to CDH 6.3 | HBase | Hue | Api Error: Unable to authenticate

CDH 5.15 upgrade to CDH 6.3 | HBase | Hue | Api Error: Unable to authenticate

Explorer

Greetings,

We've successfully upgraded our 5 node cluster to CDH 6.3, everything went better than expected, so we're generally happy However, after the upgrade we are no longer able to access our HBase tables from Hue.

Even in 5.15 it needed a bit of tinkering, but it did work after adding the following to Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini:

 

[hbase]
hbase_conf_dir=/etc/hbase/conf
thrift_transport=buffered

I tried removing the config snippet, but it didn't help. The logs (hbase-cmf-hbase-HBASETHRIFTSERVER-dev-edge.log.out) say that:

ERROR org.apache.hadoop.hbase.thrift.ThriftHttpServlet: Kerberos Authentication failed
Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException: Kerberos authentication failed
Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos credentails)

 The cluster is Kerberized, TLS/SSL is enabled as well. The following configuration options could be of interest:

hbase.security.authentication=kerberos
hbase.rpc.protection=privacy
hbase.master.kerberos.principal=hbase/_HOST@DEVMH.BI
hbase.thrift.kerberos.principal=HTTP/_HOST@DEVMH.BI
hadoop.security.authorization=true
hbase.rest.ssl.enabled=true
hbase.thrift.security.qop=auth-conf

 Please let me know if you need further details. Any and all help is appreciated Thanks!
Kind regards,

Gyuszi

Don't have an account?
Coming from Hortonworks? Activate your account here