question Re: password incorrect in Archives of Support Questions (Read Only)

password incorrect

amazon20062007 — Fri, 16 Sep 2022 10:55:42 GMT

After I "Enable Kerberos" I execute kinit, it reminds me to input password. But i do not set password for it.

Re: password incorrect

jsensharma — Sun, 22 Jan 2017 19:17:38 GMT

Are you passing the keytab path to it?

Example:

Syntax:
kinit -kt  /PATH/TO/Keytab_file  $PRINCIPAL_NAME

Example:
kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-ClusterDemo@EXAMPLE.COM

Re: password incorrect

amazon20062007 — Sun, 22 Jan 2017 21:44:25 GMT

Yes, I kinit -kt first, and then execute kadmin.local.

Re: password incorrect

amazon20062007 — Mon, 23 Jan 2017 17:10:54 GMT

My operation is:

[root@bigdata013 centos]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-bigdata@ISTUARY.COM
[root@bigdata013 centos]# kinit hdfs-bigdata@ISTUARY.COM
Password for hdfs-bigdata@ISTUARY.COM: 
kinit: Password incorrect while getting initial credentials

Re: password incorrect

jsensharma — Mon, 23 Jan 2017 18:00:18 GMT

@Zhao Chaofeng

Looks like your kinit was successful earlier when you run the command as it did not show any error. So i think the ticket was generated fine.

[root@bigdata013 centos]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-bigdata@ISTUARY.COM

After running the above command did you check the output of "klist" command to see if you got the kerberos ticket?

[root@bigdata013 centos]# klist

Example at my end:

# kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-JoyCluster@EXAMPLE.COM 

# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: hdfs-JoyCluster@EXAMPLE.COM

Valid starting     Expires            Service principal
01/23/17 10:00:20  01/23/17 10:00:50  krbtgt/EXAMPLE.COM@EXAMPLE.COM
    renew until 01/23/17 10:00:20

Re: password incorrect

amazon20062007 — Mon, 23 Jan 2017 18:10:23 GMT

Yes, I run the command success before, but it is not right when I run the command after I install LDAP.

Thank you, I will retry a minute.