Created 05-08-2019 10:00 PM
This is what you should do you have to create the jks Java key store file as mentioned in the below link
If you found this answer addressed your question, please take a moment to log in and click the "accept" link on the answer.
That would be a great help to Community users to find the solution quickly for these kinds of errors.
When I tried the first line in the mentioned link, it started asking me personal details like :What is your first and last name?
What is the name of your organizational unit?What is the name of your City or Locality?
I felt uncomfortable answering these. It felt like a phishing attempt to me. Can you comment on this?
Afterwards I tried the third line in the post from the link you gave.
It went fine. But the sqoop command which I used gave me an exception 'Error executing statement: java.sql.SQLException: I/O Error: GSS Failed: Invalid name provided (Mechanism level: KrbException: Cannot locate default realm)' even though I modified my sqoop command the same way mentioned in that post. can you help?
That's not a click bait quite normal with SSL/TLS certificates. You should have accomplished the steps in the sequence as indicated.
You have a kerberized environment, you should initially have run kinit as the sqoop user before launching the export/import sqoop job!
If you can explain the architecture then it's easier to figure out.
My assumption is the HDP cluster is kerberized and your MS SQL database is not?
On Linux please specify the environment variable KRB5_CONFIG=<path_of_krb5_conf_file>/krb5.conf with the location of krb5.conf file or pass it as a java system property
-Djava.security.krb5.conf=<path_of_krb5_conf_file>/krb5.conf to locate the krb5.conf correctly.
If the MS SQL server is not in the same Kerberos domain copy the krb5.conf file renamed to krb.ini and should be placed in the C:\Windows directory see the link provided.
I know MS stands for Microsoft here. What I am asking is that if I need to request the DBA to take the conf file from us and put it somewhere in the server