Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How to setup Cloudera Impala to use both VIP and server name when accessing with Kerberos

Highlighted

How to setup Cloudera Impala to use both VIP and server name when accessing with Kerberos

New Contributor

In our Cloudera cluster we have Hadoop, Hbase, Impala, Spark and a few other components.  We had setup Kerberos so that we need Kerberos tickets to access Impala.  Before we added the load balancer to the configuration, we were able to connect directly to the server using impala-shell:

 

Before adding LB to config:

$ impala-shell -i server.company.com -d bigdata -k

Starting Impala Shell using Kerberos authentication

Using service name 'impala'

Connected to server.company.com:21000

Server version: impalad version 2.7.0-cdh5.9.2 RELEASE (build 2f7871169d894fab16f8a2fb99f2e34f0df8763d)

***********************************************************************************

Welcome to the Impala shell.

(Impala Shell v2.7.0-cdh5.9.2 (2f78711) built on Tue Apr  4 01:36:19 PDT 2017)

 

After running a query, type SUMMARY to see a summary of where time was spent.

***********************************************************************************

Query: use `bigdata`

[server.company.com:21000] > 

 

 

However, after we added the load balancer to the config, we could no longer connect directly to the server but only thru the load balancer.  Is there a config that allows us to connect via both directly to the server and thru the load balancer?  Thanks.

 

 

Doesn't work after adding LB to config:

$ impala-shell -i server.company.com -d bigdata -k

Starting Impala Shell using Kerberos authentication

Using service name 'impala'

Error connecting: TTransportException, TSocket read 0 bytes

***********************************************************************************

Welcome to the Impala shell.

(Impala Shell v2.7.0-cdh5.9.2 (2f78711) built on Tue Apr  4 01:36:19 PDT 2017)

 

Run the PROFILE command after a query has finished to see a comprehensive summary

of all the performance and diagnostic information that Impala gathered for that

query. Be warned, it can be very long!

***********************************************************************************

[Not connected] >

 

 

Sending to LB after adding it to config:

$ impala-shell -i loadbalancer.company.com:21000 -d bigdata -k

Starting Impala Shell using Kerberos authentication

Using service name 'impala'

Connected to loadbalancer.company.com:21000

Server version: impalad version 2.7.0-cdh5.9.2 RELEASE (build 2f7871169d894fab16f8a2fb99f2e34f0df8763d)

***********************************************************************************

Welcome to the Impala shell.

(Impala Shell v2.7.0-cdh5.9.2 (2f78711) built on Tue Apr  4 01:36:19 PDT 2017)

 

Every command must be terminated by a ';'.

***********************************************************************************

Query: use `bigdata`

[loadbalancer.company.com:21000] >