Reply
Contributor
Posts: 56
Registered: ‎02-12-2015

Kerberos | HDFS | Failed to find any Kerberos tgt

Dear Experts,

 

I m facing the following an error when i am try "hdfs dfs -ls /" command. 

 

Caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]

 

[hdfs@nn1 ~]$ klist -ef
Ticket cache: FILE:/tmp/krb5cc_493
Default principal: hdfs@CLOUDERA.LOCAL

Valid starting Expires Service principal
12/27/16 12:19:35 12/28/16 12:19:35 krbtgt/CLOUDERA.LOCAL@CLOUDERA.LOCAL
renew until 12/27/16 12:19:35, Flags: FRI
Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96
[hdfs@nn1 ~]$

Explorer
Posts: 17
Registered: ‎11-03-2016

Re: Kerberos | HDFS | Failed to find any Kerberos tgt

Hi Neelesh,

 

Could you please post the output of listprincs from the KDC server and also realm details. 

 

Normally the principal should looks like 

hdfs/FQDN@REALM.COM

 

but in your case it I see hdfs/CLOUDERA.LOCAL. 

 

As long as your have the valid TGT for the user/service and KDC matches, you should be able to execute it. 


Cheers

Nagaraj C

Contributor
Posts: 56
Registered: ‎02-12-2015

Re: Kerberos | HDFS | Failed to find any Kerberos tgt

Hi Chinumari,

 

Please find attached details.

 

 

list_principals.PNG

 

kdc.conf.PNG

 

 

 

Contributor
Posts: 56
Registered: ‎02-12-2015

Re: Kerberos | HDFS | Failed to find any Kerberos tgt

This error has been resloved by removing and recreating kerberos configuration 

Highlighted
Cloudera Employee
Posts: 2
Registered: ‎12-27-2017

Re: Kerberos | HDFS | Failed to find any Kerberos tgt

can you clarrify how did you remove and recreate kerberos configuration? which configuration? kdc or krb5.conf

Announcements