question Kerberos Issue: Unable to Submit Topology in Archives of Support Questions (Read Only)

Kerberos Issue: Unable to Submit Topology

ganne — Sat, 12 Nov 2016 03:31:51 GMT

Running into the errors in the pictures and log file , while trying to submit a topology on a kerberised cluster. Nimbus is running on lake2.field.hortonworks.com. Can some one shed some light here, who are kerberos gurus. Appreciate any help!

Re: Kerberos Issue: Unable to Submit Topology

rmani — Mon, 14 Nov 2016 14:51:11 GMT

@Geetha Anne

Is this error you get after you kinit with that principal and do run the storm command? Could you please post the storm command line?

Re: Kerberos Issue: Unable to Submit Topology

Former Member — Mon, 14 Nov 2016 15:32:43 GMT

@Geetha Anne

Caused by: java.security.GeneralSecurityException: Checksum failed     
      at sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451)

Normally the above error indicates configuration related issues or the password has changed.

- What's the service principal name?

- How did you generate its keytab file?

- How did you specified the service name on the client side?

Re: Kerberos Issue: Unable to Submit Topology

ganne — Mon, 14 Nov 2016 23:42:55 GMT

Appreciate your input . Yes the issue was the key tab and principal. Had to kinit with the specific principal instead of the default one and the error was gone.thanks

Re: Kerberos Issue: Unable to Submit Topology

ganne — Mon, 14 Nov 2016 23:44:11 GMT

I didnot kinit. Now after i did that the error was gone . Thanks