https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-authentication-issue/m-p/178620#M64724 <P>I am trying to get a ticket from Kerberos but its failing . I have created another keytab but no luck . </P><PRE>[root@hadoop1 scripts]# klist -kte /etc/krb5.keytab | grep hdfs 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96) 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96) 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1) 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac) [root@hadoop1 scripts]# [root@hadoop1 scripts]# klist -kte /etc/security/keytabs/hdfs.headless.keytab | grep hdfs Keytab name: FILE:/etc/security/keytabs/hdfs.headless.keytab 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des-cbc-md5) [root@hadoop1 scripts]# [root@hadoop1 scripts]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US kinit: Password incorrect while getting initial credentials [root@hadoop1 scripts]# [root@hadoop1 scripts]# kinit -kt /etc/krb5.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US kinit: Password incorrect while getting initial credentials [root@hadoop1 scripts]# </PRE> Wed, 12 Jul 2017 04:09:28 GMT aliyesami 2017-07-12T04:09:28Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-authentication-issue/m-p/178620#M64724 <P>I am trying to get a ticket from Kerberos but its failing . I have created another keytab but no luck . </P><PRE>[root@hadoop1 scripts]# klist -kte /etc/krb5.keytab | grep hdfs 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96) 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96) 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1) 2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac) [root@hadoop1 scripts]# [root@hadoop1 scripts]# klist -kte /etc/security/keytabs/hdfs.headless.keytab | grep hdfs Keytab name: FILE:/etc/security/keytabs/hdfs.headless.keytab 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96) 1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des-cbc-md5) [root@hadoop1 scripts]# [root@hadoop1 scripts]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US kinit: Password incorrect while getting initial credentials [root@hadoop1 scripts]# [root@hadoop1 scripts]# kinit -kt /etc/krb5.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US kinit: Password incorrect while getting initial credentials [root@hadoop1 scripts]# </PRE> Wed, 12 Jul 2017 04:09:28 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-authentication-issue/m-p/178620#M64724 aliyesami 2017-07-12T04:09:28Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-authentication-issue/m-p/178621#M64725 <P>this article fixed the issue. The key version number was mismatching between the keytab and the kdc . The keytab files must have been hanging around from previous installation .</P><P><A href="https://cwiki.apache.org/confluence/display/AMBARI/Automated+Kerberization+Troubleshooting">https://cwiki.apache.org/confluence/display/AMBARI/Automated+Kerberization+Troubleshooting</A></P> Wed, 12 Jul 2017 05:51:25 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-authentication-issue/m-p/178621#M64725 aliyesami 2017-07-12T05:51:25Z