Error "Keychain authentication does not work..." When Creating Cross Database Join With Cloudera

Published: 20 Oct 2017
Last Modified Date: 21 Jan 2020


When creating multiple connections for a cross-database join, the following error occurs:

Keychain authentication does not work because either the required TDC file is missing from Tableau Desktop, or the TDC file on Tableau Desktop differs from the TDC file on Tableau Server. Obtain the required TDC file(<file path>), and make sure that the TDC files on Tableau Desktop and Server match.


  • Tableau Desktop
  • Cloudera Impala with SSL + Kerberos
  • MS SQL Server


Remove the following from the .tdc file for Cloudera Impala:
The new .tdc should look something like the following:
<?xml version='1.0' encoding='utf-8' ?>
<connection-customization class='hadoophive' enabled='true' version='10.5'>
  <vendor name='hadoophive' />
  <driver name='hadoophive' />
     <customization name='odbc-connect-string-extras' value='TrustedCerts=<-file path here->;CAIssuedCertNamesMismatch=1'/>



Customizations in .tdc file which are no longer necessary.

Additional Information

Starting in Tableau Desktop and Tableau Server 10.2, SSL + Kerberos for Cloudera Impala is supported in native connection to Impala, so the extra strings in the .tdc file are no longer needed.

Discuss this article... Feedback Forum
Did this article resolve the issue?