I am trying to enable LDAP integration in impala but it doesnt seem to be working. The cluster has Sentry and Kerebos enabled. I am playing off of a QuickStartVM. I run impala via " impala-shell --ssl ". I am expect to see Impala prompt me for a user name or password but instead I get errors. These are the errors I am seeing: CONSOLE: [cloudera@quickstart impalad]$ impala-shell --ssl Starting Impala Shell without Kerberos authentication SSL is enabled. Impala server certificates will NOT be verified (set --ca_cert to change) Error connecting: TTransportException, Could not connect to quickstart.cloudera:21000 Kerberos ticket found in the credentials cache, retrying the connection with a secure transport. Error connecting: TTransportException, Could not connect to quickstart.cloudera:21000 IMPALA LOGS: I0125 15:27:00.196347 1696 authentication.cc:422] Successfully authenticated principal "impala/quickstart.cloudera@CLOUDERA" on an internal connection I0125 15:27:00.334786 7069 simple-scheduler.cc:332] Registering local backend with statestore I0125 15:27:20.983526 1785 thrift-util.cc:109] TThreadPoolServer: TServerTransport died on accept: invalid sasl status I0125 15:27:20.987000 1785 thrift-util.cc:109] TThreadPoolServer: TServerTransport died on accept: invalid sasl status SETTINGS I have set in CM: Impala Daemon Command Line Arguement Advanced Configuration Snippet: --enable_ldap_auth --ldap_uri=ldaps://ldap.abc.XXX.com:636 --ldap_bind_pattern="uid=#UID,ou=people,dc=XXX,dc=com" --ldap_ca_certificate="/home/cloudera/ca_root_cert.ca" I couldnt make too much sense of all the configurations. I feel as if i am simply missing a configuration parameter. Any help would be much appreciated!
... View more
