question Re: Generate missing credetials - KDC in Support Questions

Generate missing credetials - KDC

davdop — Tue, 21 Apr 2026 06:21:57 GMT

Hello,

Im currently setting new cluster. When I try to start some role I get notifications that:
Role is missing Kerberos keytab. Go to the Kerberos Credentials page and click the Generate Missing Credentials button.

So I try to Generate Missing credentials and I got:

failed script:/opt/cloudera/cm/bin/merge_credentials.sh due to:/opt/cloudera/cm/bin/merge_credentials.sh failed with exit code 1 and output of << + export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin + PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin + KEYTAB_OUT=/var/run/cloudera-scm-server/cmf-merged-out15742810764060677617.keytab + shift + ktutil + chmod 600 /var/run/cloudera-scm-server/cmf-merged-out15742810764060677617.keytab chmod: cannot access '/var/run/cloudera-scm-server/cmf-merged-out15742810764060677617.keytab': No such file or directory

What am I missing here ?

Re: Generate missing credetials - KDC

DianaTorres — Thu, 23 Jan 2025 15:17:24 GMT

@davdop Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our CDP experts @venkatsambath @abdulpasithali who may be able to assist you further.

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

Re: Generate missing credetials - KDC

shubham_sharma — Fri, 24 Jan 2025 18:57:51 GMT

Hi @davdop

Could you please check if you are able to run kadmin remotely from your Cloudera Manager host and manage KDC ? It looks like a communication issue with KDC server

Re: Generate missing credetials - KDC

davdop — Sat, 25 Jan 2025 09:23:17 GMT

Hello, @shubham_sharma

you mean use kadmin without .local ? I have KDC installed on different host than CM.

Re: Generate missing credetials - KDC

davdop — Sat, 25 Jan 2025 09:42:15 GMT

I found a solution for this trouble. I removed kerberos DB with kdb5-util destroy and I recreate it again kdb5-util create -s.

Other thing what I found was that, when I firstly created admin cloudera principal I used cloudera-scm instead of cloudera-scm/admin. I am not sure if this could caused problem, but after destroying old DB and created cloudera-scm/admin, generating is working properly.