question Re: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher. in Archives of Support Questions (Read Only)

Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

prashanthi1601 — Fri, 16 Sep 2022 10:36:14 GMT

Problem 2: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

WARN ipc.Client: Exception encountered while connecting to the server : javax.security.sasl.SaslException:

GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]

Bad connection to FS. command aborted. exception: Call to nn-host/xxxxx failed on local exception: java.io.IOException:

javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]

Re: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

mqureshi — Wed, 24 Aug 2016 09:06:05 GMT

Hi @Prashanthi B

How do you know it's not able to read credential cache? It appears that may be no kinit was done. Can you please provide steps you take to get to the point you get this error? What does the following command returns on the same machine where you get this error?

klist-A

Re: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

prashanthi1601 — Wed, 24 Aug 2016 09:42:56 GMT

[root@lbl03bdput06c ~]# klist -A

[root@lbl03bdput06c ~]# klist klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_0)

Re: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

prashanthi1601 — Wed, 24 Aug 2016 10:56:03 GMT

Caused by: java.net.SocketTimeoutException: 60000 millis timeout while waiting for channel to be ready for read. ch : java.nio.channels.SocketChannel[connected local=xxxxx

remote=<hostname>/<IP>]

at org.apache.hadoop.net.SocketIOWithTimeout.doIO(SocketIOWithTimeout.java:164) at org.apache.hadoop.net.SocketInputStream.read(SocketInputStream.java:161) at org.apache.hadoop.net.SocketInputStream.read(SocketInputStream.java:131) at java.io.FilterInputStream.read(FilterInputStream.java:133) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at java.io.DataInputStream.readInt(DataInputStream.java:387) at org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:367) at org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:563) at org.apache.hadoop.ipc.Client$Connection.access$1900(Client.java:378) at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:732) at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:728) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:415) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1709) at org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:727) ... 31 more

Re: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

mqureshi — Wed, 24 Aug 2016 11:02:47 GMT

So there is no credential cache. You need to do a kinit first. Then you should run klist -A. Then it will show you the credential cache. It should work.

Re: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

mqureshi — Wed, 24 Aug 2016 11:03:27 GMT

This is a connection issue. Can you connect to the cluster from command line from this machine?

Re: Java is unable to read the Kerberos credentials cache created by versions of Kerberos 1.8.1 or higher.

prashanthi1601 — Thu, 25 Aug 2016 03:21:38 GMT

Yes I am able to connect, this host is the Ambari Server