414 questions
0
votes
3
answers
10k
views
Error when connect to impala with JDBC under kerberos authrication
I create a class SecureImpalaDataSource that extends DriverManagerDataSource, and use UserGroupInformation.doAs() to get a Connection to impala with keytab file. But I get the error as follow:
java....
12
votes
2
answers
12k
views
HBase Kerberos connection renewal strategy
Recently I enabled kerberos in my cluster, everything works great until my kerberos login expires, at say, 12 hours. At that point any connections I have created, any tables created with those ...
28
votes
1
answer
17k
views
Should I call ugi.checkTGTAndReloginFromKeytab() before every action on hadoop?
In my server application I'm connecting to Kerberos secured Hadoop cluster from my java application. I'm using various components like the HDFS file system, Oozie, Hive etc. On the application startup ...
37
votes
2
answers
42k
views
How can I fix the Kerberos double-hop issue?
I'm having some trouble calling a web service from within a web application and I was hoping someone here might be able to help. From what I can tell, this seems to have something to do with the ...
30
votes
4
answers
41k
views
"Defective token detected" error (NTLM not Kerberos) with Kerberos/Spring Security/IE/Active Directory
We are having trouble getting Spring Security/Kerberos/AD to work for our web app. Our diagnosis is that our AD server sending an NTLM token (we can tell as it starts with "TlRMTVNT.....") to IE and ...
6
votes
1
answer
7k
views
Spark on YARN + Secured hbase
I am submitting a job to YARN (on spark 2.1.1 + kafka 0.10.2.1) which connects to a secured hbase cluster. This job, performs just fine when i am running in "local" mode (spark.master=local[*]).
...
26
votes
2
answers
34k
views
Skipping Kerberos authentication prompts with JSch [duplicate]
I am using the Connect() method in the Ssh Java class below in order to connect to a server using SSH (JSch) and running a command in the server.
The problem is that when running Connect() the server ...
6
votes
2
answers
7k
views
Java SPNEGO Authentication & Kerberos Constrained Delegation (KCD) to backend service
I have a Java web application which do SPNEGO authentication of clients in a Windows Active Directory environment.
To authenticate the user we use code from the good old SPNEGO SourceForge project.
...
48
votes
3
answers
115k
views
When using --negotiate with curl, is a keytab file required?
The documentation describing how to connect to a kerberos secured endpoint shows the following:
curl -i --negotiate -u : "http://<HOST>:<PORT>/webhdfs/v1/<PATH>?op=..."
The -u flag ...
46
votes
9
answers
101k
views
Simple Kerberos client in Java?
Applications such a Google's Chrome and IE can transparently handle Kerberos authentication; however I can not find a "simple" Java solution to match this transparency. All of the solutions I have ...
32
votes
3
answers
139k
views
How to connect with Java into Active Directory
I am using Weblogic, Ejb3.0. Java 1.6
I need to access Active Directory via Java code.
I read about several ways (Kerberos, LDAP)
Anyone could advice me on comfortable way of doing so? where could I ...
20
votes
8
answers
40k
views
Get current Windows user name within Silverlight
Is it possible to get the currently logged in user's username with Silverlight? You can assume that user has Windows OS and the Silverlight application is hosted in Internet Explorer. Getting the ...
10
votes
1
answer
11k
views
Accessing hive metastore using jdbc with kerberos keytab
I am trying to connect to a hive metastore that has been configured to use Kerberos for authentication. This works for me when I am not trying to use a keytab file, i.e. when the program prompts me ...
8
votes
2
answers
6k
views
How can I get a Kerberos ticket with Delphi?
Are there examples which show how Delphi invokes the Active Directory Kerberos server to request a ticket granting ticket / normal ticket?
Background: the ticket is required for authentification to a ...
5
votes
2
answers
16k
views
How to get Service Token from Kerberos using SSPI
Objective:
I am trying to build Proof Of Concept client app to implement Single Sign On by using SSPI. I am new to C# and I am getting confused.
What I know and have done so far:
All users are part ...