HDF : Zookeeper server not starting after MIT Kerberos is enabled...

vivek_b2 — Tue, 21 Apr 2026 11:32:32 GMT

Dear All,

I have ran into a very troublesome issue which is creating headache for the last 1 week. I installed and HDF Cluster(v3.4.1.1) with the services Nifi,Kafka,Metrics and Smart Sense. Everything was working perfectly until I decided to enable Kerberos(MIT) in the cluster. During the keberization, everything went fine till the last step.(Start and Test services). At that point, the Zookeeper server start got failed and thereafter no services are starting. The following is the error I got from the zookeeper logs.Any help is appreciated.

2020-03-06 18:38:51,489 - INFO [main:QuorumPeerMain@127] - Starting quorum peer
2020-03-06 18:38:51,552 - ERROR [main:QuorumPeerMain@89] - Unexpected exception, exiting abnormally
java.io.IOException: Could not configure server because SASL configuration did not allow the ZooKeeper server to authenticate itself properly:
javax.security.auth.login.LoginException: Message stream modified (41)
at org.apache.zookeeper.server.ServerCnxnFactory.configureSaslLogin(ServerCnxnFactory.java:207)
at org.apache.zookeeper.server.NIOServerCnxnFactory.configure(NIOServerCnxnFactory.java:87)
at org.apache.zookeeper.server.quorum.QuorumPeerMain.runFromConfig(QuorumPeerMain.java:130)
at org.apache.zookeeper.server.quorum.QuorumPeerMain.initializeAndRun(QuorumPeerMain.java:111)
at org.apache.zookeeper.server.quorum.QuorumPeerMain.main(QuorumPeerMain.java:78)

Note :

I tried setting the following resolutions that I found online. But nothing worked.

1. udp_preference_limit = 1 
2. aes256-cts
aes128-cts
des3-hmac-sha1
arcfour-hmac
des-hmac-sha1
des-cbc-md5
des-cbc-crc

3.Regenerate Keytabs

Re: HDF : Zookeeper server not starting after MIT Kerberos is enabled...

vivek_b2 — Mon, 09 Mar 2020 05:33:25 GMT

Issue resolved. Donno how it worked,but commenting out the following property in /etc/krb5.conf resolved the issue.

#renew_lifetime =7d

Same can be done through - Ambari-Services-Kerberos-Configs-Advanced krb5-conf- krb5-conf template.

Save the configuration and restart

question HDF : Zookeeper server not starting after MIT Kerberos is enabled... in Support Questions

HDF : Zookeeper server not starting after MIT Kerberos is enabled...

Re: HDF : Zookeeper server not starting after MIT Kerberos is enabled...