question Flume: Agent - Role is missing Kerberos keytab in Archives of Support Questions (Read Only)

Flume: Agent - Role is missing Kerberos keytab

AndyE — Fri, 16 Sep 2022 09:16:47 GMT

Dear Friends

I have started using Flume and have added its service using CM. Then, added the two lines below in the Flume Configuration file:

tier1.sinks.sink1.hdfs.kerberosPrincipal = $KERBEROS_PRINCIPAL
tier1.sinks.sink1.hdfs.kerberosKeytab = $KERBEROS_KEYTAB

But Flume service did not start rather generated the following configuration error:
Agent(<our_name_node_name>):Role is missing Kerberos keytab.

Would you please help?

P.S. I have previously enabled Kerberos in CM (by following the link belew) before adding the Flume service. I can see all services principals (for all of our hosts) in CM EXCEPT Flume one on Administration > Kerberos >Credentials tab.

http://blog.cloudera.com/blog/2014/07/new-in-cloudera-manager-5-1-direct-active-directory-integration-for-kerberos-authentication/

Thanks much in advance and please let me know if you have any question.

Kind regards
Andy

Re: Flume: Agent - Role is missing Kerberos keytab

Darren — Mon, 29 Dec 2014 18:51:04 GMT

Hi Andy,

On the Kerberos Credentials tab that you already discussed, click the Generate Credentials button. Flume should then get its keytab.

Thanks,
Darren

Re: Flume: Agent - Role is missing Kerberos keytab

AndyE — Thu, 01 Jan 2015 23:17:59 GMT

This is exactly what we did and it fixed the problem. Thanks much Darren.

FYI: Before that step, we had to temporarily re-enable the user which is capable to create the credentials. We have decided earlier to disable that user to improve security and that was the main source of the issue.

Appreciate your support.

Kind regards

Andy

Re: Flume: Agent - Role is missing Kerberos keytab

vibe — Wed, 02 May 2018 23:59:36 GMT

Where is this Kerberos Credentials tab in 5.14.3? I have a message that says to click the same "Generate Credentials" button but can't find it.

Edit:

Found it under Administration > Security > Kerberos Credentials