<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question Re: HDFS GUI is giving error in Support Questions</title>
    <link>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/398946#M250345</link>
    <description>&lt;P&gt;&lt;a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/110513"&gt;@divyank&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT size="4"&gt;Have you resolved this issue if not the issue you're encountering is common when Kerberos is enabled for HDFS, as it introduces authentication requirements that need to be properly configured. Here’s how to diagnose and resolve the problem:&lt;/FONT&gt;&lt;/P&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;1. Root Cause Analysis&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;P&gt;&lt;FONT size="4"&gt;When Kerberos is enabled:&lt;/FONT&gt;&lt;/P&gt;&lt;OL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Authentication&lt;/STRONG&gt;: Every interaction with HDFS now requires a Kerberos ticket.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Misconfiguration&lt;/STRONG&gt;: The HDFS service or client-side configurations may not be aligned with Kerberos requirements.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Keytabs&lt;/STRONG&gt;: Missing or improperly configured keytab files for the HDFS service or users accessing the service.&lt;/FONT&gt;&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Browser Access&lt;/STRONG&gt;: The HDFS Web UI may not support unauthenticated access unless explicitly configured.&lt;/FONT&gt;&lt;/P&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;2. Steps to Resolve&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 1: Verify Kerberos Configuration&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check the Kerberos principal and keytab file paths for HDFS in Cloudera Manager:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Navigate to &lt;STRONG&gt;HDFS Service &amp;gt; Configuration&lt;/STRONG&gt;.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Look for settings like:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;hadoop.security.authentication → Should be set to &lt;STRONG&gt;Kerberos&lt;/STRONG&gt;.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;dfs.namenode.kerberos.principal → Should match the principal defined in the KDC.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;dfs.namenode.keytab.file → Ensure the file exists on the NameNode and has correct permissions.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 2: Validate Kerberos Ticket&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check if the HDFS service has a valid Kerberos ticket:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;klist -kte /path/to/hdfs.keytab&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;FONT size="4"&gt;If missing, reinitialize the ticket:&lt;/FONT&gt;&lt;BR /&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;kinit -kt /path/to/hdfs.keytab hdfs/&amp;lt;hostname&amp;gt;@&amp;lt;REALM&amp;gt;&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Test HDFS access from the command line:&lt;/FONT&gt;&lt;BR /&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfs -&lt;SPAN class="hljs-built_in"&gt;ls&lt;/SPAN&gt; /&lt;/FONT&gt;&lt;/LI-SPOILER&gt; &lt;FONT size="4"&gt;If you get authentication errors, the Kerberos ticket might be invalid.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 3: Validate HDFS Web UI Access&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Post-Kerberos, accessing the HDFS Web UI (e.g., &lt;A href="http://namenode-host:50070" target="_blank" rel="noopener"&gt;http://namenode-host:50070&lt;/A&gt;) often requires authentication. By default:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Unauthenticated Access&lt;/STRONG&gt;: May be blocked.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Browser Integration&lt;/STRONG&gt;: Ensure your browser is configured for Kerberos authentication or the UI is set to allow unauthenticated users.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Enable unauthenticated access in Cloudera Manager (if needed):&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Go to &lt;STRONG&gt;HDFS Service &amp;gt; Configuration&lt;/STRONG&gt;.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Search for hadoop.http.authentication.type and set it to simple.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 4: Review Logs for Errors&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check NameNode logs for Kerberos-related errors:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;less /var/log/hadoop/hdfs/hadoop-hdfs-namenode.log&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;FONT size="4"&gt;Look for errors like:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;"GSSException: No valid credentials provided"&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;"Principal not found in the keytab"&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 5: Synchronize Clocks&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Kerberos is sensitive to time discrepancies. Ensure all nodes in the cluster have synchronized clocks&lt;/FONT&gt;&lt;BR /&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;ntpdate &amp;lt;NTP-server&amp;gt;&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 6: Restart Services&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Restart the affected HDFS services via Cloudera Manager after making changes:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Restart NameNode, DataNode, and HDFS services.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;FONT size="4"&gt;Test the status of HDFS&lt;/FONT&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfsadmin -report&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;3. Confirm Resolution&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;&lt;FONT size="4"&gt;Verify HDFS functionality:&lt;/FONT&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Test browsing HDFS via the CLI:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfs -&lt;SPAN class="hljs-built_in"&gt;ls&lt;/SPAN&gt; /&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="overflow-y-auto p-4"&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;&lt;FONT size="4"&gt;Access the Web UI to confirm functionality:&lt;/FONT&gt;&lt;/P&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;http://&amp;lt;namenode-host&amp;gt;:50070&lt;/FONT&gt;&lt;/LI-SPOILER&gt; &lt;FONT size="4"&gt;If HDFS is working via CLI but not in the Web UI, revisit the Web UI settings in Cloudera Manager to allow browser access or configure browser Kerberos support.&lt;/FONT&gt;&lt;BR /&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;4. Troubleshooting Tips&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;If the issue persists:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check the Kerberos ticket validity with:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;klist&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Use the following commands to troubleshoot connectivity:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfs -&lt;SPAN class="hljs-built_in"&gt;mkdir&lt;/SPAN&gt; /test hdfs dfs -put &amp;lt;local-file&amp;gt; /test&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;FONT size="4"&gt;Let me know how it goes or if further guidance is needed!&lt;/FONT&gt;&lt;/P&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
    <pubDate>Mon, 16 Dec 2024 22:10:51 GMT</pubDate>
    <dc:creator>Shelton</dc:creator>
    <dc:date>2024-12-16T22:10:51Z</dc:date>
    <item>
      <title>HDFS GUI is giving error</title>
      <link>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/388153#M246552</link>
      <description>&lt;P&gt;Hi Team,&amp;nbsp;&lt;BR /&gt;HDFS was working before kurberos enabled , noww post enabling kurberos HDFS is not working. Getting error in HDFS GUI, HDFS is running in cloudera manager.&lt;BR /&gt;&lt;BR /&gt;Name node is showing,&amp;nbsp;&lt;SPAN&gt;Test of whether the NameNode is in safe mode.&lt;/SPAN&gt;&lt;/P&gt;&lt;DIV class="health-explanation alert alert-danger"&gt;&lt;SPAN&gt;&lt;SPAN class="bold"&gt;```&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV class="health-explanation alert alert-danger"&gt;&lt;SPAN&gt;&lt;SPAN class="bold"&gt;Bad&lt;/SPAN&gt;&amp;nbsp;:&lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;SPAN class="bold"&gt;This NameNode is in safe mode.&lt;/SPAN&gt;&lt;/DIV&gt;&lt;P&gt;```&lt;BR /&gt;&lt;BR /&gt;Error:&lt;BR /&gt;&lt;BR /&gt;```&lt;/P&gt;&lt;H2&gt;HTTP ERROR 502 Process information not available.&lt;/H2&gt;&lt;P&gt;URI:STATUS:MESSAGE:SERVLET:&lt;/P&gt;&lt;TABLE&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;/cmf/process/1546341404/logs&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;502&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;Process information not available.&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD&gt;Spring MVC Dispatcher Servlet&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;P&gt;```&lt;/P&gt;</description>
      <pubDate>Tue, 21 May 2024 12:09:35 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/388153#M246552</guid>
      <dc:creator>divyank</dc:creator>
      <dc:date>2024-05-21T12:09:35Z</dc:date>
    </item>
    <item>
      <title>Re: HDFS GUI is giving error</title>
      <link>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/388204#M246573</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;To fix the HDFS issue after enabling Kerberos, you should check the Kerberos configuration and ensure that all services are correctly authenticated. If the NameNode is in safe mode, you can try to exit it using the command hdfs dfsadmin -safemode leave.&lt;/P&gt;&lt;P&gt;For the HTTP ERROR 502, verify the network configuration and ensure that the Cloudera Manager services are running properly.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 22 May 2024 09:27:10 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/388204#M246573</guid>
      <dc:creator>BrandyN11</dc:creator>
      <dc:date>2024-05-22T09:27:10Z</dc:date>
    </item>
    <item>
      <title>Re: HDFS GUI is giving error</title>
      <link>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/398806#M250310</link>
      <description>&lt;P&gt;&lt;a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/110513"&gt;@divyank&lt;/a&gt;&amp;nbsp;The HDFS NameNode in safemode may happen due to its waiting for the DataNodes to send the block report. If that is not completed it may remain in the safemode. Ensure all the DataNodes started properly and no errors with it and connected to NameNode. You may review the NameNode logs and look for what its waiting for to exit safemode. Manually exiting the safemode may cause data loss of un reported blocks. If you have doubt, don't hesitate to contact Cloudera Support.&lt;/P&gt;</description>
      <pubDate>Thu, 12 Dec 2024 18:13:23 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/398806#M250310</guid>
      <dc:creator>sathishkr</dc:creator>
      <dc:date>2024-12-12T18:13:23Z</dc:date>
    </item>
    <item>
      <title>Re: HDFS GUI is giving error</title>
      <link>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/398946#M250345</link>
      <description>&lt;P&gt;&lt;a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/110513"&gt;@divyank&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT size="4"&gt;Have you resolved this issue if not the issue you're encountering is common when Kerberos is enabled for HDFS, as it introduces authentication requirements that need to be properly configured. Here’s how to diagnose and resolve the problem:&lt;/FONT&gt;&lt;/P&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;1. Root Cause Analysis&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;P&gt;&lt;FONT size="4"&gt;When Kerberos is enabled:&lt;/FONT&gt;&lt;/P&gt;&lt;OL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Authentication&lt;/STRONG&gt;: Every interaction with HDFS now requires a Kerberos ticket.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Misconfiguration&lt;/STRONG&gt;: The HDFS service or client-side configurations may not be aligned with Kerberos requirements.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Keytabs&lt;/STRONG&gt;: Missing or improperly configured keytab files for the HDFS service or users accessing the service.&lt;/FONT&gt;&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Browser Access&lt;/STRONG&gt;: The HDFS Web UI may not support unauthenticated access unless explicitly configured.&lt;/FONT&gt;&lt;/P&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;2. Steps to Resolve&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 1: Verify Kerberos Configuration&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check the Kerberos principal and keytab file paths for HDFS in Cloudera Manager:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Navigate to &lt;STRONG&gt;HDFS Service &amp;gt; Configuration&lt;/STRONG&gt;.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Look for settings like:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;hadoop.security.authentication → Should be set to &lt;STRONG&gt;Kerberos&lt;/STRONG&gt;.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;dfs.namenode.kerberos.principal → Should match the principal defined in the KDC.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;dfs.namenode.keytab.file → Ensure the file exists on the NameNode and has correct permissions.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 2: Validate Kerberos Ticket&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check if the HDFS service has a valid Kerberos ticket:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;klist -kte /path/to/hdfs.keytab&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;FONT size="4"&gt;If missing, reinitialize the ticket:&lt;/FONT&gt;&lt;BR /&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;kinit -kt /path/to/hdfs.keytab hdfs/&amp;lt;hostname&amp;gt;@&amp;lt;REALM&amp;gt;&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Test HDFS access from the command line:&lt;/FONT&gt;&lt;BR /&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfs -&lt;SPAN class="hljs-built_in"&gt;ls&lt;/SPAN&gt; /&lt;/FONT&gt;&lt;/LI-SPOILER&gt; &lt;FONT size="4"&gt;If you get authentication errors, the Kerberos ticket might be invalid.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 3: Validate HDFS Web UI Access&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Post-Kerberos, accessing the HDFS Web UI (e.g., &lt;A href="http://namenode-host:50070" target="_blank" rel="noopener"&gt;http://namenode-host:50070&lt;/A&gt;) often requires authentication. By default:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Unauthenticated Access&lt;/STRONG&gt;: May be blocked.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Browser Integration&lt;/STRONG&gt;: Ensure your browser is configured for Kerberos authentication or the UI is set to allow unauthenticated users.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Enable unauthenticated access in Cloudera Manager (if needed):&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Go to &lt;STRONG&gt;HDFS Service &amp;gt; Configuration&lt;/STRONG&gt;.&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Search for hadoop.http.authentication.type and set it to simple.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 4: Review Logs for Errors&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check NameNode logs for Kerberos-related errors:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;less /var/log/hadoop/hdfs/hadoop-hdfs-namenode.log&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;FONT size="4"&gt;Look for errors like:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;"GSSException: No valid credentials provided"&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;"Principal not found in the keytab"&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 5: Synchronize Clocks&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Kerberos is sensitive to time discrepancies. Ensure all nodes in the cluster have synchronized clocks&lt;/FONT&gt;&lt;BR /&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;ntpdate &amp;lt;NTP-server&amp;gt;&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H4&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Step 6: Restart Services&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Restart the affected HDFS services via Cloudera Manager after making changes:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Restart NameNode, DataNode, and HDFS services.&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;FONT size="4"&gt;Test the status of HDFS&lt;/FONT&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfsadmin -report&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;3. Confirm Resolution&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;&lt;FONT size="4"&gt;Verify HDFS functionality:&lt;/FONT&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Test browsing HDFS via the CLI:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfs -&lt;SPAN class="hljs-built_in"&gt;ls&lt;/SPAN&gt; /&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="overflow-y-auto p-4"&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;&lt;FONT size="4"&gt;Access the Web UI to confirm functionality:&lt;/FONT&gt;&lt;/P&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;http://&amp;lt;namenode-host&amp;gt;:50070&lt;/FONT&gt;&lt;/LI-SPOILER&gt; &lt;FONT size="4"&gt;If HDFS is working via CLI but not in the Web UI, revisit the Web UI settings in Cloudera Manager to allow browser access or configure browser Kerberos support.&lt;/FONT&gt;&lt;BR /&gt;&lt;H3&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;4. Troubleshooting Tips&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;If the issue persists:&lt;/FONT&gt;&lt;UL&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Check the Kerberos ticket validity with:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;klist&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/LI&gt;&lt;LI&gt;&lt;FONT size="4"&gt;Use the following commands to troubleshoot connectivity:&lt;/FONT&gt;&lt;DIV class="contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary dark:bg-gray-950"&gt;&lt;DIV class="flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between rounded-t-md h-9 bg-token-sidebar-surface-primary dark:bg-token-main-surface-secondary select-none"&gt;&lt;LI-SPOILER&gt;&lt;FONT size="4"&gt;hdfs dfs -&lt;SPAN class="hljs-built_in"&gt;mkdir&lt;/SPAN&gt; /test hdfs dfs -put &amp;lt;local-file&amp;gt; /test&lt;/FONT&gt;&lt;/LI-SPOILER&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;FONT size="4"&gt;Let me know how it goes or if further guidance is needed!&lt;/FONT&gt;&lt;/P&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
      <pubDate>Mon, 16 Dec 2024 22:10:51 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Support-Questions/HDFS-GUI-is-giving-error/m-p/398946#M250345</guid>
      <dc:creator>Shelton</dc:creator>
      <dc:date>2024-12-16T22:10:51Z</dc:date>
    </item>
  </channel>
</rss>

