question Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED in Archives of Support Questions (Read Only)

I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

skanthety — Fri, 16 Sep 2022 10:13:53 GMT

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

skanthety — Thu, 14 Apr 2016 21:02:33 GMT

@rajeshbabu chintaguntla

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

KuldeepK — Thu, 14 Apr 2016 23:59:41 GMT

@sunil kanthety - looks like some issues with the installation of KERBEROS_CLIENT. can you please remove it using API and re-install ?

https://cwiki.apache.org/confluence/display/AMBARI/Using+APIs+to+delete+a+service+or+all+host+components+on+a+host

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

skanthety — Fri, 15 Apr 2016 04:35:08 GMT

Hi kuldeep,

Could you provide more information on how to remove and re-install. When you mention re-install, do I have to disable kerberos from the ambari gui and enable? I am newbie to bigdata.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

mayurbhokase — Sat, 16 Apr 2016 01:51:37 GMT

@Kuldeep Kulkarni

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

KuldeepK — Sat, 16 Apr 2016 02:10:30 GMT

@sunil kanthety - Can you please try below command to delete KERBEROS_CLIENT

curl -H "X-Requested-By:ambari" -u admin:admin -X DELETE "http://<AMBARI-SERVER>:8080/api/v1/clusters/services/KERBEROS/components/KERBEROS_CLIENT

To re-install, again you can use Ambari API however easiest method is try to disable and re-enable Kerberos from Ambari UI.

Please do let me know how it goes.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

skanthety — Mon, 18 Apr 2016 20:24:33 GMT

Kuldeep,

Should I run the CURL command on the host running the ambari-server or run it on all the other nodes individually. Could you please let me know.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

skanthety — Mon, 18 Apr 2016 21:02:53 GMT

Kuldeep,

I ran the above CURL command on the host running the ambari-server and then tried to disable kerberos from ambari UI. The stop services step failed on all hosts. The stderr file has the following error:

Traceback (most recent call last): File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_client.py", line 77, in <module> KerberosClient().execute() File "/usr/lib/python2.6/site-packages/resource_management/libraries/script/script.py", line 219, in execute method(env) File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_client.py", line 31, in install self.configure(env) File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_client.py", line 40, in configure self.setup_jce() File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_common.py", line 448, in setup_jce raise Fail("Security is enabled, but JCE policy zip is not specified.") resource_management.core.exceptions.Fail: Security is enabled, but JCE policy zip is not specified.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

rlevas — Mon, 18 Apr 2016 22:29:11 GMT

@sunil kanthety

You seem to be in an interesting state. What version of Ambari are you running?

For the issue you posted where the error is "Security is enabled, but JCE policy zip is not specified". Check your ambari.properties file for a property named "jce.name". The file listed there should exist in /var/lib/ambari-server/resources. If the property or the file does not exist we need to investigate why. For starters, what version of Java are you using and did you have ambari-server setup install it or did you install Java manually?

When enabling Kerberos via the UI. Does a button allowing you to skip the failed stage appear? If so, you should be able to click that and continue with the disable process. Once you complete disabling Kerberos, you should make sure that the Kerberos service is removed by issuing the following REST API call:

DELETE /api/v1/clusters/CLUSTERNAME/services/KERBEROS

For example, using curl on a cluster named C1 where the administrator username and password have not be changed from the default values:

curl -H "X-Requested-By:ambari" -u admin:admin -X DELETE "http://<AMBARI-SERVER>:8080/api/v1/clusters/C1/services/KERBEROS

After this, you should be able to retry enabling Kerberos again.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

skanthety — Mon, 18 Apr 2016 23:14:46 GMT

Thanks Robert for your inputs. I added the property jce.name in the ambari.properties file and restarted the ambari-server. After that the dekerberize options went through till the point that now it fails at the step "start services". From the error logs it indicates the following:

File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 291, in _call raise Fail(err_msg) resource_management.core.exceptions.Fail: Execution of 'cat /var/lib/ambari-agent/tmp/pass | ACCUMULO_CONF_DIR=/usr/hdp/current/accumulo-tracer/conf/server /usr/hdp/current/accumulo-client/bin/accumulo shell -u root -f /var/lib/ambari-agent/tmp/cmds' returned 1. Password: ******** 2016-04-18 10:22:20,606 [trace.DistributedTrace] INFO : SpanReceiver org.apache.accumulo.tracer.ZooTraceClient was loaded successfully. 2016-04-18 10:22:20,677 [shell.Shell] ERROR: org.apache.accumulo.core.client.AccumuloSecurityException: Error BAD_CREDENTIALS for user root - Username or Password is Invalid

On doing some research found the following at the below link:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.0.0/bk_releasenotes_ambari_2.1.0.0/content/ambari_relnotes-2.1.0.0-known-issues.html

followed the steps, but it indicated that "Accumulo is not properly configured."

I ran the bootstrap_config.sh file and chose the following options but it now fails indicating that JAVA_HOME is not set. I set the JAVA_HOME globally and in the accumulo-env.sh file. Still the error prevails.

Can you please let me know if i am doing it right.

Thanks

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

rlevas — Tue, 19 Apr 2016 00:35:10 GMT

@sunil kanthety

Unfortunately, I am not familiar with Accumulo issues.

Does the issue correct itself when Kerberos is re-enabled?

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

skanthety — Tue, 19 Apr 2016 04:07:20 GMT

Hi Robert,

I tried to enable kerberos from the ambari UI. This time it fails indicating with the following error:

An internal system exception occurred; Unexpected error condition executing kadmin command

Could you please let me know which variable needs to be set. Iw as looking in your AMBARI-10047, but could not find the solution.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

rlevas — Wed, 20 Apr 2016 01:48:54 GMT

Is there anything relevant in the ambari-server-log. I need more information than "unexpected error condition" to provide help on this.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

KuldeepK — Sun, 18 Aug 2019 10:47:22 GMT

@sunil kanthety

I have resolved similar issue today for one of our customer, here are the details

1. Removed KERBEROS_CLIENT for problematic hosts using below curl call

curl -H "X-Requested-By:ambari" -u admin:admin -X DELETE "http://<AMBARI-SERVER>:8080/api/v1/clusters/<cluster-name>/hosts/<host-name>/host_components/KERBEROS_CLIENT

2. Ensure from Ambari UI that KERBEROS_CLIENT got removed.

3. From Ambari UI --> goto the problematic host --> click on Add button --> select Kerberos Client

4. Installation should complete without any issue.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

ArpitAgarwal — Tue, 03 May 2016 08:27:01 GMT

I ran into the same issue. The Ambari server logs at `/var/log/ambari-server/ambari-server.log` showed:

Failed to execute kadmin:
    Command: /usr/bin/kadmin -s c6401.ambari.apache.org -p kadmin/admin@EXAMPLE.COM -w ******** -r EXAMPLE.COM -q "get_principal kadmin/admin@EXAMPLE.COM"
        ExitCode: 1
    STDOUT: Authenticating as principal kadmin/admin@EXAMPLE.COM with password.
    STDERR: kadmin: Communication failure with server while initializing kadmin interface

Sure enough I had forgotten to start the kadmin service on the KDC. After running `/etc/init.d/kadmin start` the error went away. HTH.

Re: I tried to install kerberos in the hadoop cluster. i see the following error on all the hosts. On host eursrcux999 role KERBEROS_CLIENT in invalid state. Invalid transition. Invalid event: HOST_SVCCOMP_OP_IN_PROGRESS at INSTALL_FAILED

rmanimkr — Sun, 05 Nov 2017 16:52:12 GMT

@Kuldeep Kulkarni, Hi, I have tried the same. Even after installing the kerberos client Manuallly, I get the same error.

not sure, why the Test Kerberos client fails, I need to skip that and go to second page.

* All the hosts got the Kerberos client installed.

Kerberos Clients

3 Kerberos Clients Installed

1.jpg