question Re: API POST Error when Configuring Kerberos through wizard in Support Questions

API POST Error when Configuring Kerberos through wizard

brendan_smith — Fri, 16 Sep 2022 11:20:35 GMT

I am trying to enable Kerberos for my HDP-2.5 cluster. I have been following through the documentation but on the 'Install and Test Kerberos' the test is failing with the error shown below.

I am using an existing MIT KDC which I have installed on a separate box, and the JCE was unzipped for each host in the cluster.

The KDC connection was ok and I can't seem to find any other people with the same issue. Recently SSL was added to Ambari unsure if this is related. I have tried restarting the Kadmin server but with no avail.

Any help is much appreciated.

Re: API POST Error when Configuring Kerberos through wizard

jsensharma — Mon, 27 Mar 2017 10:51:37 GMT

@Brendan Smith

When you get the above mentioned error in the ambari UI, do you see a complete stackTrace of the error in detail inside the "/var/log/ambari-server/ambari-server.log". Can you please post that error here?

Re: API POST Error when Configuring Kerberos through wizard

jsensharma — Mon, 27 Mar 2017 10:51:38 GMT

@Brendan Smith

Also please check if you have installed the following packages on your ambari server?

yum install krb5-server krb5-libs krb5-workstation

Specially the "krb5-workstation" or "krb5-devel" which contains the "kadmin" utility on the ambari-server host.

Re: API POST Error when Configuring Kerberos through wizard

brendan_smith — Sun, 18 Aug 2019 10:21:39 GMT

Shouldn't the workstations be installed as part of the "Install Kerberos Client" which is being run successfully?

I did do the install on the Ambari host and am now getting a different message would this be because the server is now on the Ambari host.

Re: API POST Error when Configuring Kerberos through wizard

brendan_smith — Mon, 27 Mar 2017 11:30:16 GMT

Hey there, yes the error is in there hopefully you can make more sense of it.

output.txt

Re: API POST Error when Configuring Kerberos through wizard

brendan_smith — Mon, 27 Mar 2017 11:43:01 GMT

Ok so I updated the /etc/krb5.conf file to the same found on the KDC host and it seems to work now. I didn't see this step anywhere in the documentation and thought the wizard would install the clients.

Thanks a lot!