Skip to main content
younes
Silver ⭐️
November 8, 2022
Solved

Workflow Failed in SSH Action with error GSS initiate failed

Hello team,

my workflow has been failing for several days in SSH actions randomly.
the error found in the SSH logs is:

 

Causé par : GSSException : aucune information d'identification valide fournie (niveau de mécanisme : TGT a été révoqué (20))
sur sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:772)
sur sun.security.jgss.GSSContextImpl.initSecContext (GSSContextImpl.java:248)
sur sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
sur com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192)
... 45 plus
Causé par : KrbException : TGT a été révoqué (20)
sur sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
sur sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:226)
sur sun .security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:237)
à sun.security.krb5.internal.CredentialsUtil.serviceCredsSingle(CredentialsUtil.java:482)
à sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:340)
à sun.security.krb5.internal.CredentialsUtil.serviceCreds (CredentialsUtil.java:314)
sur sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:169)
sur sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:490)
sur sun.security.jgss. krb5.Krb5Context.initSecContext(Krb5Context.java:695)
... 48 de plus
Causé par : KrbException : l'identifiant ne correspond pas à la valeur attendue (906)

 

I'm really lost, I don't know exactly where the problem comes from.

if anyone can help me i will be grateful

 

SergeyP
SergeyPAnswer
Gold ⭐️
November 11, 2022

The problem was resolved after uninstalling the Windows update KB5018411 on domain controllers.

3 replies

SergeyP
Gold ⭐️
November 10, 2022

Hi,

 

This is very strange, but we had a similar problem two days ago.
Some queries in impala started to fall with an Kerberos error:

 

Couldn't setup connection for impala/impalad-hostname@domain.com to NN-hostname/NN-ip:8020
Caused by: KrbException: TGT has been revoked (20)
at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
…
... 37 more
Caused by: KrbException: Identifier doesn't match expected value (906)

 

We noticed such errors only in Impalad and Impala Catalogd services.
Other services like HDFS works fine.

 

We suspect that the causes of the problem (TGT has been revoked) are in Windows domain.

Translate
SergeyP
SergeyPAnswer
Gold ⭐️
November 11, 2022

The problem was resolved after uninstalling the Windows update KB5018411 on domain controllers.

Translate
younes
younesAuthor
Silver ⭐️
November 11, 2022

Thank You SergeyP

Translate