Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Impala - Kerberos: GSS Initiate Failed occurring after previously successful attempts

Highlighted

Impala - Kerberos: GSS Initiate Failed occurring after previously successful attempts

New Contributor

This issue has been reported numerous times but mine comes with a particular wrinkle. The first few connection attempts authenticate and write to Impala successfully. It's only on the final two calls that I receive the following:

 

2018-01-19 14:47:28,469 ERROR [main] org.apache.thrift.transport.TSaslTransport: SASL negotiation failure
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]

 

My connection string is as follows:

 

connection=jdbc:impala://this.that.org:12345/;AuthMech=1;KrbRealm=this.that.org;KrbHostFQDN=this.that.org;KrbServiceName=impala;SSL=1 

 

And I build my connection like so:

 

static {
    try {
        Class.forName("com.cloudera.impala.jdbc41.Driver");

    } catch (ClassNotFoundException e) {        LOG.error(e.toString());
    }
}

Connection getConnectionFromDriverManager() throws SQLException{
    return DriverManager.getConnection(connectionUrl);
}

public void InsertImpala(Collection<Entries> Entries) {

    Connection conn;

    try {        conn = getConnectionFromDriverManager();

        } catch (SQLException e) {

    }

 

Can anyone offer any direction?