1. Forum
  2. Usenet
  3. COMP.PROTOCOLS.KERBEROS

  • Implement kereberos authentication in Presto 340

    From LOKESH KHANDELWAL@21:1/5 to All on Fri Mar 19 22:14:09 2021
    Hi All,

    I have performed all the steps mentioned in presto guide (https://trino.io/docs/current/security/server.html) to implement kerberos authentication.
    Also, as per my knowledge have correctly configured the krb5.conf, as the tickets are generating successfully
    [ PROD root@ZMLPZCNVSAPD06 /home/canvas]# klist
    Ticket cache: KEYRING:persistent:0:krb_ccache_JzVp1Mb
    Default principal: presto@ZMLPZCNVSAPD06

    Valid starting Expires Service principal
    03/19/2021 06:58:54 03/20/2021 06:58:54 krbtgt/ZMLPZCNVSAPD06@ZMLPZCNVSAPD06

    But the query over presto throws following error:
    Error running command: Authentication failed: Invalid Token io.prestosql.client.ClientException: Authentication failed: Invalid Token
    at io.prestosql.client.StatementClientV1.requestFailedException(StatementClientV1.java:470)
    at io.prestosql.client.StatementClientV1.<init>(StatementClientV1.java:137)
    at io.prestosql.client.StatementClientFactory.newStatementClient(StatementClientFactory.java:24)
    at io.prestosql.cli.QueryRunner.startInternalQuery(QueryRunner.java:144)
    at io.prestosql.cli.QueryRunner.startQuery(QueryRunner.java:130)
    at io.prestosql.cli.Console.process(Console.java:331)
    at io.prestosql.cli.Console.runConsole(Console.java:257)
    at io.prestosql.cli.Console.run(Console.java:156)
    at io.prestosql.cli.Presto.main(Presto.java:31)

    Any possible solution or workaround for this?

    ----
    Regards,
    Lokesh

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dinesh Kumar Prajapati@21:1/5 to LOKESH KHANDELWAL on Tue Jan 25 02:51:43 2022
    On Saturday, March 20, 2021 at 1:14:10 PM UTC+8, LOKESH KHANDELWAL wrote:
    Hi All,

    I have performed all the steps mentioned in presto guide (https://trino.io/docs/current/security/server.html) to implement kerberos authentication.
    Also, as per my knowledge have correctly configured the krb5.conf, as the tickets are generating successfully
    [ PROD root@ZMLPZCNVSAPD06 /home/canvas]# klist
    Ticket cache: KEYRING:persistent:0:krb_ccache_JzVp1Mb
    Default principal: presto@ZMLPZCNVSAPD06

    Valid starting Expires Service principal
    03/19/2021 06:58:54 03/20/2021 06:58:54 krbtgt/ZMLPZCNVSAPD06@ZMLPZCNVSAPD06

    But the query over presto throws following error:
    Error running command: Authentication failed: Invalid Token io.prestosql.client.ClientException: Authentication failed: Invalid Token
    at io.prestosql.client.StatementClientV1.requestFailedException(StatementClientV1.java:470)
    at io.prestosql.client.StatementClientV1.<init>(StatementClientV1.java:137) at io.prestosql.client.StatementClientFactory.newStatementClient(StatementClientFactory.java:24)
    at io.prestosql.cli.QueryRunner.startInternalQuery(QueryRunner.java:144)
    at io.prestosql.cli.QueryRunner.startQuery(QueryRunner.java:130)
    at io.prestosql.cli.Console.process(Console.java:331)
    at io.prestosql.cli.Console.runConsole(Console.java:257)
    at io.prestosql.cli.Console.run(Console.java:156)
    at io.prestosql.cli.Presto.main(Presto.java:31)

    Any possible solution or workaround for this?

    ----
    Regards,
    Lokesh

    Did you solve this issue ?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)