2859626 - Delegation Setup Error Between HANA and HADOOP Using SPARKSQL (Kerberos Authentication)

When trying to set up an SDA connection from HANA to HADOOP using the SPARKSQL adapter, the following errors are encountered:

• Authentication Error:

SparkSQLAccess::createSessionContinueMessage: ERROR: Authentication failed!! Got an StatusError when accessing Kerberos init context:: Kerberos error. Major: "unspecified [851968]", minor: "KDC can't fulfill requested option [2529638925/-1765328371]"

• hana_controller.log:

00/00/00 00:00:00 DEBUG HanaMessageHandler: Received Request from: '00.000.00.00'; Message Type => 'MDS_BROWSE'
00/00/00 00:00:00 INFO CommandRouterLegacy: Current Assignments => 1 *** Sensitive Data Detected And Removed: <  >***000-00000000000000000000#00000000-0000-0000-0000-00000000000e -> Actor[akka://SAPHanaSpark/user/Controller/HanaSparkRouter/$a#-2057821885]; Incoming Assignment => '0 *** Sensitive Data Detected And Removed: < > ***000-00000000000000000000#00000000-0000-0000-0000-00000000000f'
00/00/00 00:00:00 INFO RequestHandler: Bound Message to Orchestrator: '00000000-0000-0000-0000-00000000000f'
00/00/00 00:00:00 INFO RequestHandler: Retrieving Bound Message: '00000000-0000-0000-0000-00000000000f'
00/00/00 00:00:00 DEBUG NetworkUtils: Outbound Message => 'Message Type => 'ERROR'; Message Id => '2278955484417812'; Request Id => '00000000-0000-0000-0000-00000000000f'; Session Id => '1 *** Sensitive Data Detected And Removed: < > ***000-00000000000000000000';'
00/00/00 00:00:00 ERROR RequestHandler: Failed to perform 'MDS_BROWSE' due to java.lang.IllegalArgumentException: Null user
at org.apache.hadoop.security.UserGroupInformation.createProxyUser(UserGroupInformation.java:1530)

• indexserver.trc:

[000000]{000000}[00/0] 0000-00-00 00:00:00.000000 e FedTrace FederationRdes.cpp(00378) : Delegation setup error:Hana user SYSTEM has no external identity
[...]
[000000]{000000}[00/0] 0000-00-00 00:00:00.000000 e FedTrace SparkSQLAccess.cpp(04072) : SparkSQLAccess::BrowseMetadata: failed with error: Failed to perform 'MDS_BROWSE' due to java.lang.IllegalArgumentException: Null user

• HANA revision: HANA 2.0 SP03
• Spark at Hadoop cluster Version: Spark version 1.6
• Hadoop cluster Version: Hadoop 2.6.0-cdh5.15.1
• Spark Controller version: 2.0 SP03 PL5

SPARKSQL, Spark controller, HADOOP, HANA, Delegation, Delegation Setup Error, Kerberos, Authentication, Remote Server, SDA, Smart Data Access, SDA Connection , KBA , HAN-DB-SDA , SAP HANA Smart Data Access , HAN-DB-SEC , SAP HANA Security & User Management , Problem