Have added following below entries in vdpadmin.bat file to be taken during java command:
-Dsun.security.krb5.debug=true
-Djavax.security.auth.useSubjectCredsOnly=false
-Djava.security.krb5.conf=C:\utility\conf\krb5.ini
-Djava.security.auth.login.config C:\utility\conf\gss-jaas.conf
-Dhadoop.home.dir=C:\utility\
Gss-jaas.conf, Krb5.ini, keytab and principal seems to be correct. Latest winutils.exe is kept in Hadoop.home.dir bin folder in above setting.
Also, while setting up a hive connection with below highlighted connection string and taking up default hive jdbc drivers provided with denodo, and opting for Kerberos authentication with keytab, gets below exception. Can someone please help resolving?
Have also created a separate java driver to test the above setting and it resolves the host and commits the keytab file, but further it throws below error.
*******************************START*****************
java.sql.SQLException: Could not open client transport with JDBC Uri: jdbc:hive2://host:10000/<db>;principal=hive/<instance>@<realm.com>;sasl.qop=auth;auth=kerberos;kerberosAuthType=fromSubject: GSS initiate failed at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:215) at org.apache.hive.jdbc.HiveConnection.(HiveConnection.java:163) at org.apache.hive.jdbc.HiveDriver.connect(HiveDriver.java:105) at java.sql.DriverManager.getConnection(DriverManager.java:571) at java.sql.DriverManager.getConnection(DriverManager.java:233) at
Caused by: org.apache.thrift.transport.TTransportException: GSS initiate failed at org.apache.thrift.transport.TSaslTransport.sendAndThrowMessage(TSaslTransport.java:232) at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:316) at org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:52) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport$1.run(TUGIAssumingTransport.java:49) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:415) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1671) at org.apache.hadoop.hive.thrift.client.TUGIAssumingTransport.open(TUGIAssumingTransport.java:49) at org.apache.hive.jdbc.HiveConnection.openTransport(HiveConnection.java:190) ... 15 more
**************************END**********************
