question Re: Kerberos, no supported encryption types error in Archives of Support Questions (Read Only)

Kerberos, no supported encryption types error

JoaquinS — Wed, 30 Nov 2016 21:32:41 GMT

Hello,

I'm having this error when I try to start HDFS after enabling Kerberos:

java.io.IOException: Login failure for hdfs/levante.akainix.local@lebeche.akainix.local from keytab hdfs.keytab: javax.security.auth.login.LoginException: No supported encryption types listed in default_tkt_enctypes

The encriptation type that i'm using is aes256-cts-hmac-sha1-99, as show the /etc/krb5.conf file:

default_tgs_enctypes = aes256-cts-hmac-sha1-96
default_tkt_enctypes = aes256-cts-hmac-sha1-96
permitted_enctypes = aes256-cts-hmac-sha1-96

Other thing is that the node that contains the KDC started correctly but the rest of them showed the error.

Thanks

Joaquín

Re: Kerberos, no supported encryption types error

JoaquinS — Wed, 30 Nov 2016 22:48:00 GMT

Solved. I had install the JCE Policy file.

Re: Kerberos, no supported encryption types error

prabhat10 — Fri, 01 Feb 2019 05:57:45 GMT

could you share the steps fo jce policy file

i have install in /usr/java/jdk1.8.0_171/jre/bin/security/US_export_policy.jar

/usr/java/jdk1.8.0_171/jre/bin/security/local_policy.jar