HDP 2.5 How to connect Zeppelin to Phoenix in secured cluster

[#1]

HDP 2.5 secured cluster with Zeppelin and HBase installed. I could connect to Phoenix using the sqlline.py utility using the following parameter.

/usr/hdp/current/phoenix-client/bin/sqlline.py <zk1>,<zk2>,<zk3>:2181:/hbase-secure:hbase@DOMAIN.COM:/etc/security/keytabs/hbase.headless.keytab

However when I try to use similar parameter for jdbc conn string in phoenix, I got

null
org.apache.phoenix.exception.PhoenixIOException: Failed after attempts=1, exceptions:
Wed Jan 18 15:13:11 UTC 2017, RpcRetryingCaller{globalStartTime=1484752390908, pause=100, retries=1}, org.apache.hadoop.hbase.MasterNotRunningException: com.google.protobuf.ServiceException: java.io.IOException: Broken pipe

class org.apache.zeppelin.interpreter.InterpreterException

The jdbc interpreter settings for Phoenix are

Do I need to create phoenixuser principal and use that keytab instead? and what is phoenix.user and phoenix.password?

[#2]

I checked the script more carefully. It looks like adding

export CLASSPATH=$CLASSPATH:/etc/hbase/conf

to zeppelin-env.sh using Zeppelin configuration in Ambari would be enough.

[#3]

@Sergey Soldatov

Add it in ambari at the end of "Advanced zeppelin-env" -> "zeppelin_env_content" worked perfectly.