KNOWLEDGE BASE

Error "Keychain authentication does not work..." When Creating Cross Database Join With Cloudera


Published: 20 Oct 2017
Last Modified Date: 20 Oct 2017

Issue

When creating multiple connections for a cross-database join, the following error occurs:

Keychain authentication does not work because either the required TDC file is missing from Tableau Desktop, or the TDC file on Tableau Desktop differs from the TDC file on Tableau Server. Obtain the required TDC file(<file path>), and make sure that the TDC files on Tableau Desktop and Server match.

Environment

  • Tableau Desktop 10.2 and newer versions
  • Cloudera Impala with SSL + Kerberos
  • MS SQL Server

Resolution

Remove the following from the .tdc file for Cloudera Impala:
UseSASL=1;SSL=1
The new .tdc should look something like the following:
<?xml version='1.0' encoding='utf-8' ?>
<connection-customization class='hadoophive' enabled='true' version='10.3'>
  <vendor name='hadoophive' />
  <driver name='hadoophive' />
  <customizations>
     <customization name='odbc-connect-string-extras' value='TrustedCerts=<-file path here->;CAIssuedCertNamesMismatch=1'/>
               </customizations>
</connection-customization>


 

Cause

Customizations in .tdc file which are no longer necessary.

Additional Information

Starting in Tableau Desktop and Tableau Server 10.2, SSL + Kerberos for Cloudera Impala is supported in native connection to Impala, so the extra strings in the .tdc file are no longer needed.
Did this article resolve the issue?