Community Spring Cleaning week is here! Join your fellow Maveryx in digging through your old posts and marking comments on them as solved. Learn more here!

Alteryx Designer Desktop Knowledge Base

Definitive answers from Designer Desktop experts.

"GSSAPI Error: Internal Credentials Cache error" when connecting to Hive or Impala with Kerberos SSPI via ODBC

fadib
Alteryx Alumni (Retired)
Created

Issue

 

When trying to connect to Impala or Hive using an Active Directory Kerberos instance (Kerberos SSPI), an error appears: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Internal Credentials Cache error).

 

SSPI.png

 

 

Environment

 

 

Diagnosis

 

Confirm that you are using Kerberos SSPI by asking your DB Admin and/or IT.

If you manually generate a Kerberos ticket through the MIT Kerberos client or a kinit command, you are not using Kerberos SSPI.

 

 

Cause

 

The "Internal Credentials Cache error" means that Alteryx cannot find the Kerberos ticket needed for authentication to connect to the Hadoop instance. By default, the ODBC driver uses the GSSAPI library to handle Kerberos authentication. With the GSSAPI library, Alteryx is trying to located a Kerberos ticket in the credentials cache but is unable to do so because Kerberos SSPI does not use the credentials cache.

 

 

 

Solution

 

Make sure you have the latest Simba Impala or Hive driver for the next steps.

 

1.Open the Windows ODBC AdministratorODBC Admin.png

 

 

2. Select the User or System Impala DSN that you have configured and press Configure:DSN.png

 

 

3. Once in the Simba Impala ODBC Driver DSN Setup window, press on Advanced Options:

DSN_Setup.png

 

 

4. Under Advanced Options, check the Enable for this DSN for the Use Only SSPI:

For Impala:
Advanced_Options.png

 

For Hive:

2019-08-05_12-09-07.png

 

5. Press OK.

 

6. Click "Test" in the main ODBC DSN Window to make sure the connection works.

 

7. Start Alteryx and test your connection in an Input tool.

 

Comments
mgrajkumar
7 - Meteor

Hi

Got the below error for HIVE using SIMBA HIVE ODBC driver. I have enabled the SSPI and ODBC test has succeeded but Designer failed. Any config need to be further tuned. 

KerbError.PNG

 

Gourishetti
5 - Atom

Sorry wrong post.