KNOWLEDGE BASE

Error "(34) Error from the Hive: SASL(-1): generic failure: ... The specified target is unknown or unreachable" Refreshing Hadoop Extract


Published: 09 Dec 2013
Last Modified Date: 07 Mar 2017

Issue

When viewing a dashboard with a live connection to HiveServer 2, or when refreshing a HiveServer 2 extract on Tableau Server, and when using Kerberos authentication for HiveServer 2, one of the following errors might occur:
 

On Cloudera

[Cloudera][Hardy] (46) Error occurred while initializing the Hive client

Or:

[Cloudera] (34) Error from the Hive: SASL(-1): generic failure: Failed to initialize security context: The specified target is unknown or unreachable

On Hortonworks

[Hortonworks][HiveODBC] (34) Error from the Hive: SASL(-1): generic failure: Failed to initialize security context: The specified target is unknown or unreachable
 

On Impala

[Cloudera][ImpalaODBC] (100) Error from the Impala Thrift API:SASL(-1): generic failure: Failed to initialize security context: The specified target is unknown or unreachable

Environment

  • Tableau Server
  • Tableau Desktop
  • MIT Kerberos Ticket Manager
  • Hadoop HiveServer2 (Cloudera or Hortonworks)
  • Cloudera Impala

Resolution

Step 1: Ensure the recommended ODBC driver is installed. 

Download the driver from the Tableau Drivers & Activation page.

Step 2: Set up the Kerberos configuration file in the default location.

  • Obtain a krb5.conf configuration file from your Kerberos administrator.
  • The default location is C:\ProgramData\MIT\Kerberos5. This directory may be hidden by the Windows operating system.
  • Rename the configuration file from krb5.conf to krb5.ini. 
  • Copy krb5.ini to the default location and overwrite the empty sample file. 
Note: To set up this configuration file in a non-default location, please consult the MIT Kerberos documentation. MIT management should be installed in every instance of Tableau Server (primary and workers).

Step 3: Set up the Kerberos credential cache file.

  • Create a writable directory. For example, C:\temp 
  • Click the Windows Start menu. 
  • Right-click Computer
  • Click Properties > Advanced system settings.
  • Click Environment Variables
  • Under System variables, click New
  • In Variable name, enter: KRB5CCNAME. 
  • In Variable value, enter: <writable directory from step 1>\krb5cache. For example, C:\temp\krb5cache
Note: krb5cache is a regular file (not a directory) managed by the Kerberos software and should not be created by the user. If you receive a permission error when you first use Kerberos, check to make sure that the krb5cache file does not exist as a file or a directory. This set up needs to be performed on every instance of Tableau Server (primary and workers).
  • Click OK to save the new variable. 
  • Ensure the variable is listed in the System variables list. 
  • Restart your computer to ensure that MIT Kerberos for Windows uses the new settings. 
Did this article resolve the issue?