Generate keytabs after change LDAP BIND USER password in LDAP

iyanezd — Fri, 02 Dec 2016 12:30:27 GMT

Hi,

We changed the password in the domain, and then in the cloudera manager.

But after restart, regenerate keytabs doesn't run. We have the next error:

---------------------------------------------------------------------------
Generate Missing Credentials

/usr/share/cmf/bin/gen_credentials_ad.sh failed with exit code 1 and output of <<
+ export PATH=/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin:/sbin:/usr/sbin:/bin:/usr/bin
+ PATH=/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin:/sbin:/usr/sbin:/bin:/usr/bin
+ KEYTAB_OUT=/var/run/cloudera-scm-server/cmf6374473708191204515.keytab
+ PRINC=hbase/server0004.company.corp@.COMPANY.CORP
+ USER=edh_zyUDoxOiFI
+ PASSWD=REDACTED
+ DELETE_ON_REGENERATE=false
+ SET_ENCRYPTION_TYPES=false
+ ENC_TYPES_MASK=4
+ USERACCOUNTCONTROL=66048
+ ACCOUNTEXPIRES=0
+ OBJECTCLASSES='objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
'
+ DIST_NAME=CN=edh_zyUDoxOiFI,OU=services,OU=users,OU=edh,OU=hadoop,DC=company,DC=corp
+ '[' -z /etc/krb5.conf ']'
+ echo 'Using custom config path '\''/etc/krb5.conf'\'', contents below:'
+ cat /etc/krb5.conf
+ SIMPLE_PWD_STR=
+ '[' '' = '' ']'
+ kinit -k -t /var/run/cloudera-scm-server/cmf1000316718995056834.keytab U12345@COMPANY.CORP
kinit: Preauthentication failed while getting initial credentials

---------------------------------------------------------------------------

please, could you help us?

Re: Generate keytabs after change LDAP BIND USER password in LDAP

iyanezd — Mon, 05 Dec 2016 08:18:01 GMT

Hi, we could solve it. We only had to "Import Kerberos Account Manager Credentials".

Thanks.

question Generate keytabs after change LDAP BIND USER password in LDAP in Archives of Support Questions (Read Only)

Generate keytabs after change LDAP BIND USER password in LDAP

Re: Generate keytabs after change LDAP BIND USER password in LDAP