question Re: webHDFS 403 error in Support Questions

question Re: webHDFS 403 error in Support Questions https://community.cloudera.com/t5/Support-Questions/webHDFS-403-error/m-p/242316#M204119 <A href="https://community.hortonworks.com/questions/232883/@Javert%20Kirilov">@Javert Kirilov</A>I have just completed the kerberization of a Single node Centos 7 HDP3.1.0.0 running Ambari 2.7.3.0 everything went as planned no hiccups. See attached screenshots krb5.conf<PRE>[libdefaults] renew_lifetime = 7d forwardable = true default_realm = UGANDA.UG ticket_lifetime = 24h dns_lookup_realm = false dns_lookup_kdc = false default_ccache_name = /tmp/krb5cc_%{uid} #default_tgs_enctypes = aes des3-cbc-sha1 rc4 des-cbc-md5 #default_tkt_enctypes = aes des3-cbc-sha1 rc4 des-cbc-md5 [domain_realm] .uganda.ug = UGANDA.UG uganda.ug = UGANDA.UG [logging] default = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log kdc = FILE:/var/log/krb5kdc.log [realms] UGANDA.UG = { admin_server = pawor.uganda.ug kdc = pawor.uganda.ug }</PRE>kadm5.acl<PRE>*/admin@UGANDA.UG *</PRE>kdc.conf<PRE>[kdcdefaults] kdc_ports = 88 kdc_tcp_ports = 88 [realms] UGANDA.UG = { #master_key_type = aes256-cts acl_file = /var/kerberos/krb5kdc/kadm5.acl dict_file = /usr/share/dict/words admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal }</PRE>To help in the diagnostics can you align your configuration to mine mapping your REALM and Server values and retest! Can you try start the services manually, run the start date nodes command on all the data nodes<PRE>su -l hdfs -c "/usr/hdp/current/hadoop-hdfs-namenode/../hadoop/sbin/hadoop-daemon.sh start secondarynamenode" su -l hdfs -c "/usr/hdp/current/hadoop-hdfs-datanode/../hadoop/sbin/hadoop-daemon.sh start datanode"</PRE>Take a keen interest in the supported_enctypes and compare with your cluster I don't think adding all the encryption types will help:-) <IMG src="https://community.cloudera.com/t5/image/serverpage/image-id/8019i1418EA7B566C5789/image-size/large?v=1.0&px=999" border="0" alt="kirilov02.png" title="kirilov02.png" /><IMG src="https://community.cloudera.com/t5/image/serverpage/image-id/8021iD3795A5C08F168F5/image-size/large?v=1.0&px=999" border="0" alt="kirilov04.png" title="kirilov04.png" /><IMG src="https://community.cloudera.com/t5/image/serverpage/image-id/8022i7A29D8BB2485DA8D/image-size/large?v=1.0&px=999" border="0" alt="kirilov03.png" title="kirilov03.png" /><IMG src="https://community.cloudera.com/t5/image/serverpage/image-id/8024i27954A97CEB9A257/image-size/large?v=1.0&px=999" border="0" alt="kirilov01.png" title="kirilov01.png" /> Thu, 17 Jan 2019 08:29:35 GMT Shelton 2019-01-17T08:29:35Z