Failed to renew token: Kind: kms-dt during running Pig job

Paulina — Fri, 16 Sep 2022 14:03:48 GMT

Dear all!

I have kerberized cluster on Cloudera Express 5.9.3, Java Version: 1.7.0_67.

Since I turned on HDFS Data At Rest Encryption using Java Keystore KMS I recieve an error in Pig job

Failed to renew token: Kind: kms-dt, Service: 10.6.1.44:16000, Ident: (kms-dt owner=hdfs, renewer=yarn, realUser=, issueDate=1547451323413, maxDate=1548056123413, sequenceNumber=2, masterKeyId=2)

Yarn log:

Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect

Caused by: java.security.UnrecoverableKeyException: Password verification failed

I have checked the pessword by doing keytool -list, the password is correct.

Please, help me to resolve this problem.

Re: Failed to renew token: Kind: kms-dt during running Pig job

Paulina — Tue, 05 Feb 2019 13:34:08 GMT

Passwords for trust store and keystore must be the same. After changing the password for trust store everything went good.

question Failed to renew token: Kind: kms-dt during running Pig job in Support Questions

Failed to renew token: Kind: kms-dt during running Pig job

Re: Failed to renew token: Kind: kms-dt during running Pig job