Shahzad Aslam
Shahzad Aslam

Reputation: 300

Still cannot configure Cloudera Hadoop Security Now its kinit and principal

I am still stuck with cloudera security. I followed all step and configure security including installing Kerberos. At end i created hdfs user in Kerberos using kadmin. i can do kinit hdfs and verified that there is ticket. My cluster is running in Cloudera quick start VM.

then i issue hdfs dfs -ls / command and i gave me errors

16/07/12 02:18:50 WARN ipc.Client: Exception encountered while connecting to the server : javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
ls: Failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]; Host Details : local host is: "quickstart.cloudera/127.0.0.1"; destination host is: "quickstart.cloudera":8020; 

I search internet and came across this post http://www.cloudera.com/documentation/archive/cdh/3-x/3u6/CDH3-Security-Guide/cdh3sg_topic_14_2.html which indicate some problems with Kerbrose. it says first create ticket using kinit hdfs and then renew ticket using kinit -R but NOW this command is also giving error kinit: Ticket expired while renewing credentials. I again searched internet and found this link https://blog.godatadriven.com/kerberos_kdc_install.html which indicate to modify principal's maxrenewlife setting that i did and verified. but still kinit -R giving the same error.

Note the OS CentOS on Cloudera QuickStart. Stuck on this point of setting security for last 1 week so a help will be my life saver.

Regards Shahzad Aslam

Upvotes: 0

Views: 387

Answers (1)

saranicole
saranicole

Reputation: 2473

I wrote up a guide to troubleshooting Kerberized CDH at Running any Hadoop command fails after enabling security. . Same content posted at http://sarastreeter.com/2016/09/26/resolving-hadoop-problems-on-kerberized-cdh-5-x/

Upvotes: 0

Related Questions