Error "GSSAPI Error: Unspecified GSS failure." when connecting to Cloudera with AD Kerberos delegation on Web Player

Error "GSSAPI Error: Unspecified GSS failure." when connecting to Cloudera with AD Kerberos delegation on Web Player

book

Article ID: KB0081134

calendar_today

Updated On:

Products Versions
Spotfire Web Player 7.5 and higher

Description

The MIT Kerberos client should not be installed on the Web Player Node if you want to use Active Directory (AD) Kerberos delegation. If MIT Kerberos client is installed on the Web Player Node machine you may encounter this error when trying to access using the Cloudera connector:

ERROR [08S01] [Cloudera][ImpalaODBC] (100) Error from the Impala Thrift API: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Internal credentials cache error)

This means that the delegation did not work.

Issue/Introduction

MIT Kerberos client should not be installed on the Web Player Node if you want to use Active Directory Kerberos delegation

Environment

TIBCO Spotfire Server Spotfire Node Manager with Web Player Service Cloudera cluster in another trusted domain

Resolution

Uninstall the MIT Kerberos Client and restart the server.

Additional Information

https://www.cloudera.com/documentation/other/connectors/impala-odbc/latest/Cloudera-ODBC-Driver-for-Impala-Install-Guide.pdf
Powered by Wolken Software