question Re: Workflow Failed in SSH Action with error GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: TGT has been revoked (20))] in Support Questions

Workflow Failed in SSH Action with error GSS initiate failed

younes — Tue, 21 Apr 2026 07:47:56 GMT

Hello team,

my workflow has been failing for several days in SSH actions randomly.
the error found in the SSH logs is:

Causé par : GSSException : aucune information d'identification valide fournie (niveau de mécanisme : TGT a été révoqué (20))
sur sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:772)
sur sun.security.jgss.GSSContextImpl.initSecContext (GSSContextImpl.java:248)
sur sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
sur com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192)
... 45 plus
Causé par : KrbException : TGT a été révoqué (20)
sur sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
sur sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:226)
sur sun .security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:237)
à sun.security.krb5.internal.CredentialsUtil.serviceCredsSingle(CredentialsUtil.java:482)
à sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:340)
à sun.security.krb5.internal.CredentialsUtil.serviceCreds (CredentialsUtil.java:314)
sur sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:169)
sur sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:490)
sur sun.security.jgss. krb5.Krb5Context.initSecContext(Krb5Context.java:695)
... 48 de plus
Causé par : KrbException : l'identifiant ne correspond pas à la valeur attendue (906)

I'm really lost, I don't know exactly where the problem comes from.

if anyone can help me i will be grateful

Re: Workflow Failed in SSH Action with error GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: TGT has been revoked (20))]

SergeyP — Thu, 10 Nov 2022 06:33:09 GMT

Hi,

This is very strange, but we had a similar problem two days ago.
Some queries in impala started to fall with an Kerberos error:

Couldn't setup connection for impala/impalad-hostname@domain.com to NN-hostname/NN-ip:8020
Caused by: KrbException: TGT has been revoked (20)
at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
…
... 37 more
Caused by: KrbException: Identifier doesn't match expected value (906)

We noticed such errors only in Impalad and Impala Catalogd services.
Other services like HDFS works fine.

We suspect that the causes of the problem (TGT has been revoked) are in Windows domain.

Re: Workflow Failed in SSH Action with error GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: TGT has been revoked (20))]

SergeyP — Fri, 11 Nov 2022 06:36:58 GMT

The problem was resolved after uninstalling the Windows update KB5018411 on domain controllers.

Re: Workflow Failed in SSH Action with error GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: TGT has been revoked (20))]

younes — Fri, 11 Nov 2022 08:57:32 GMT

Thank You SergeyP