Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Kerberos, no supported encryption types error

avatar
Contributor

Hello,

I'm having this error when I try to start HDFS after enabling Kerberos:

 

java.io.IOException: Login failure for hdfs/levante.akainix.local@lebeche.akainix.local from keytab hdfs.keytab: javax.security.auth.login.LoginException: No supported encryption types listed in default_tkt_enctypes

The encriptation type that i'm using is aes256-cts-hmac-sha1-99, as show the /etc/krb5.conf file:

default_tgs_enctypes = aes256-cts-hmac-sha1-96
default_tkt_enctypes = aes256-cts-hmac-sha1-96
permitted_enctypes = aes256-cts-hmac-sha1-96

Other thing is that the node that contains the KDC started correctly but the rest of them showed the error.

 

Thanks

Joaquín

 

1 ACCEPTED SOLUTION

avatar
Contributor
Solved. I had install the JCE Policy file.

View solution in original post

2 REPLIES 2

avatar
Contributor
Solved. I had install the JCE Policy file.

avatar
Explorer

could you share the steps fo jce policy file

 

 

i have install in /usr/java/jdk1.8.0_171/jre/bin/security/US_export_policy.jar

 

/usr/java/jdk1.8.0_171/jre/bin/security/local_policy.jar