<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question Re: Error while enabling kerberos in Support Questions</title>
    <link>https://community.cloudera.com/t5/Support-Questions/Error-while-enabling-kerberos/m-p/71781#M2949</link>
    <description>&lt;P&gt;&lt;a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/4054"&gt;@bgooley&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;ldaps:// smoothly generated the accounts,&amp;nbsp;&amp;nbsp;unicodepwd, usersharedcontrol&amp;nbsp;must be needed for AD to create users and for those ldaps&amp;nbsp;is mandatory. I think it should be added to Cloudera&amp;nbsp;documentation.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;kinit -kt /var/run/cloudera-scm-agent/process/`ls -lrt /var/run/cloudera-scm-agent/process/ | awk '{print $9}' |grep zookeeper| tail -1`/zookeeper.keytab principal&lt;/P&gt;&lt;P&gt;[root@hostname sbalusu_c@example.com]# klist&lt;BR /&gt;Ticket cache: KEYRING:persistent:0:0&lt;BR /&gt;Default principal: zookeeper/hostname.example.com@EXAMPLE.COM&lt;/P&gt;&lt;P&gt;Valid starting Expires Service principal&lt;BR /&gt;07/12/2018 16:12:00 07/13/2018 02:12:00 krbtgt/EXAMPLE.COM@EXAMPLE.COM&lt;BR /&gt;renew until 07/19/2018 16:11:59&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have added udp_preference_limit=1 but still getting the earlier error:&lt;/P&gt;&lt;TABLE&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;4:17:47.210 PM&lt;/TD&gt;&lt;TD&gt;ERROR&lt;/TD&gt;&lt;TD&gt;QuorumPeerMain&lt;/TD&gt;&lt;TD&gt;&lt;PRE&gt;Unexpected exception, exiting abnormally
java.io.IOException: Could not configure server because SASL configuration did not allow the  ZooKeeper server to authenticate itself properly: javax.security.auth.login.LoginException: ICMP Port Unreachable
	at org.apache.zookeeper.server.ServerCnxnFactory.configureSaslLogin(ServerCnxnFactory.java:207)
	at org.apache.zookeeper.server.NIOServerCnxnFactory.configure(NIOServerCnxnFactory.java:87)
	at org.apache.zookeeper.server.quorum.QuorumPeerMain.runFromConfig(QuorumPeerMain.java:135)
	at org.apache.zookeeper.server.quorum.QuorumPeerMain.initializeAndRun(QuorumPeerMain.java:116)
	at org.apache.zookeeper.server.quorum.QuorumPeerMain.main(QuorumPeerMain.java:79)&lt;/PRE&gt;&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Documentation does not talk about ICMP port, I tried enabling debug mode but could not figure out which port it is looking for. Any idea?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks &amp;amp; Regards,&lt;/P&gt;&lt;P&gt;Siva&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 12 Jul 2018 21:39:26 GMT</pubDate>
    <dc:creator>balusu</dc:creator>
    <dc:date>2018-07-12T21:39:26Z</dc:date>
  </channel>
</rss>

