question Re: Regenerate Kerberos Keytab for a particular service? in Archives of Support Questions (Read Only)

Regenerate Kerberos Keytab for a particular service?

shashant_panwar — Fri, 07 Apr 2017 00:25:26 GMT

I installed Ranger & Ambari-Infra in my cluster via Ambari but installed hung up on Setup Keytab. Although, the service installed properly but "ranger-usersync" failed due to service.keytab does not exist.

Can anyone suggest how to re-generate keytab for a particular service?

HDP - 2.5.3, Ambari - 2.4.2.0

Re: Regenerate Kerberos Keytab for a particular service?

jsensharma — Fri, 07 Apr 2017 00:36:21 GMT

@Shashant Panwar

Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.

Texts from 2.5.0.3 Doc:

You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-operations/content/how_to_regenerate_keytabs.html

Re: Regenerate Kerberos Keytab for a particular service?

namaheshwari — Fri, 07 Apr 2017 00:48:00 GMT

Please see below guide for Ambari 2.4.2.0:

http://docs.hortonworks.com/HDPDocuments/Ambari-2.4.2.0/bk_ambari-user-guide/content/how_to_regenerate_keytabs.html

Re: Regenerate Kerberos Keytab for a particular service?

shashant_panwar — Fri, 07 Apr 2017 01:53:02 GMT

Thank you guys for the prompt response.

Root cause: Somehow Kerberos admin session was expired which was not creating/setup any key tabs.

Resolution: I fixed it by restarting Ambari. After that, regeneration of ticket resolved the problem.

Re: Regenerate Kerberos Keytab for a particular service?

shashant_panwar — Fri, 07 Apr 2017 01:53:29 GMT

Thank you @Namit Maheshwari.