[HBASE-12366] Add login code to HBase Canary tool.

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 0.98.8, 0.99.2
• Component/s: security
• Assignee: Srikanth Srungarapu
• Reporter: Srikanth Srungarapu
• Created: 28/Oct/14 22:04
• Updated: 06/Apr/18 19:54
• Resolved: 12/Nov/14 21:51

Description

Currently, HBase canary tool doesn't have provision for renewing Kerberos ticket. So, if it is left running for sufficiently long periods, it would error out with the following exception messages.

2014-09-22 14:20:18,781 WARN org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hbase (auth:KERBEROS) cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
2014-09-22 14:20:18,783 WARN org.apache.hadoop.ipc.RpcClient: Exception encountered while connecting to the server : javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
2014-09-22 14:20:18,783 FATAL org.apache.hadoop.ipc.RpcClient: SASL authentication failed. The most likely cause is missing or invalid credentials. Consider 'kinit'.
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] 

Sub-Tasks

• Document the newly introduced params for providing principal and keytabs.: Closed