curl 提交kerberos认证的服务 #6961

wangmiao1002 · 2025-03-05T08:04:00Z

wangmiao1002
Mar 5, 2025

kyuubi：1.10.1,使用curl请求失败，麻烦给一下指导建议，谢谢～

服务配置：

kyuubi.frontend.bind.host=16.123.9.156
kyuubi.frontend.thrift.binary.bind.port=10009
kyuubi.ha.addresses=zk:2181
kyuubi.ha.namespace=kyuubi_etl
kyuubi.session.engine.idle.timeout=PT30M
kyuubi.metadata.store.jdbc.database.type=MYSQL
kyuubi.metadata.store.jdbc.password=ij9nn7ORo7
kyuubi.metadata.store.jdbc.url=jdbc:mysql://127.0.0.1:3306/kyuubi_metastore
kyuubi.metadata.store.jdbc.user=RW_ky_me
kyuubi.backend.server.event.loggers=JSON
kyuubi.backend.server.event.json.log.path=file:///home/data/kyuubi/event
kyuubi.kinit.principal=hive/[email protected]
kyuubi.kinit.keytab=/home/data/kyuubi/hive.keytab
kyuubi.authentication=KERBEROS
kyuubi.spnego.keytab=/home/data/kyuubi/hive.keytab
kyuubi.spnego.principal=HTTP/[email protected]

kyuubi-ctl 可以成功返回，请求命令如下：

kyuubi-ctl list session -b --hostUrl http://hadoop01:10099  --version v1 --authSchema spnego --spnegoHost hadoop01

使用curl请求，返回异常，希望给个建议：

curl -X 'GET' --negotiate -u : "http://hadoop01:10099/api/v1/sessions"
curl 版本

 curl -V
curl 7.56.1 (x86_64-pc-linux-gnu) libcurl/7.56.1 OpenSSL/1.0.1e zlib/1.2.3 libidn2/0.10 libssh2/1.4.2
Release-Date: 2017-10-23
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz UnixSockets HTTPS-proxy

请求异常信息：

curl -v -X 'GET' --negotiate -u : "http://hadoop01:10099/api/v1/sessions"
Note: Unnecessary use of -X or --request, GET is already inferred.
*   Trying 16.123.9.156...
* TCP_NODELAY set
* Connected to hadoop01 (16.123.9.156) port 10099 (#0)
> GET /api/v1/sessions HTTP/1.1
> Host: 16.123.9.156:10099
> User-Agent: curl/7.56.1
> Accept: */*
>
< HTTP/1.1 401 Unauthorized
< Cache-Control: must-revalidate,no-cache,no-store
< Content-Type: text/html;charset=iso-8859-1
< Content-Length: 571
< Server: Jetty(9.4.56.v20240826)
<
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
<title>Error 401 No auth scheme matched for null</title>
</head>
<body><h2>HTTP ERROR 401 No auth scheme matched for null</h2>
<table>
<tr><th>URI:</th><td>/api/v1/sessions</td></tr>
<tr><th>STATUS:</th><td>401</td></tr>
<tr><th>MESSAGE:</th><td>No auth scheme matched for null</td></tr>
<tr><th>SERVLET:</th><td>org.glassfish.jersey.servlet.ServletContainer-2b2954e1</td></tr>
</table>
<hr/><a href="https://jetty.org/">Powered by Jetty:// 9.4.56.v20240826</a><hr/>

</body>
</html>
* Connection #0 to host hadoop01 left intact

Madhukar525722 · 2025-03-17T11:12:02Z

Madhukar525722
Mar 17, 2025

HI @wangmiao1002 , were you able to fix this issue?

1 reply

tyoushinya Mar 24, 2025

I met the same issue on our Kyuubi 1.9.0 environment.
Configurations as following.

flink.execution.target yarn-application
kyuubi.authentication KERBEROS
kyuubi.ctl.rest.auth.schema spnego
kyuubi.engine.type SPARK_SQL
kyuubi.frontend.rest.bind.port 10099
kyuubi.ha.addresses ochadoop90.asiainfo.com:2181,utos74.asiainfo.com:2181,utos39.asiainfo.com:2181
kyuubi.ha.zookeeper.acl.enabled false
kyuubi.ha.zookeeper.session.timeout 600000
kyuubi.kinit.keytab /etc/security/keytabs/kyuubi.service.keytab
kyuubi.kinit.principal ocdp/_HOST@ocdp
kyuubi.metadata.store.jdbc.url jdbc:sqlite:kyuubi_state_store.db
kyuubi.metrics.json.location metrics
kyuubi.operation.log.dir.root server_operation_logs
kyuubi.session.engine.initialize.timeout 300000
kyuubi.session.engine.startup.maxLogLines 30
kyuubi.spnego.keytab /etc/security/keytabs/spnego.service.keytab
kyuubi.spnego.principal HTTP/zhenye100.asiainfo.com@ocdp
spark.executor.memory 4g
spark.master yarn
spark.submit.deployMode cluster
spark.yarn.driver.memory 4g
spark.yarn.queue default

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

curl 提交kerberos认证的服务 #6961

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

curl 提交kerberos认证的服务 #6961

Uh oh!

Uh oh!

wangmiao1002 Mar 5, 2025

Replies: 1 comment · 1 reply

Uh oh!

Madhukar525722 Mar 17, 2025

Uh oh!

tyoushinya Mar 24, 2025

wangmiao1002
Mar 5, 2025

Replies: 1 comment 1 reply

Madhukar525722
Mar 17, 2025