solr api is throwing error Cannot find key of appropriate type to decrypt AP REP - AES256

dsharma — Tue, 05 Dec 2017 13:59:06 GMT

I am getting below error:





p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Menlo}
span.s1 {font-variant-ligatures: no-common-ligatures}



2017-12-04 14:01:07.894 WARN  (qtp59559151-26) [   ] o.a.h.s.a.s.AuthenticationFilter Authentication exception: GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - AES256 CTS mode with HMAC SHA1-96)

org.apache.hadoop.security.authentication.client.AuthenticationException: GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - AES256 CTS mode with HMAC SHA1-96)

        at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.authenticate(KerberosAuthenticationHandler.java:399)

        at org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:507)

        at org.apache.solr.security.KerberosFilter.doFilter(KerberosFilter.java:46)

        at org.apache.solr.security.KerberosPlugin.doAuthenticate(KerberosPlugin.java:144)

        at org.apache.solr.servlet.SolrDispatchFilter.authenticateRequest(SolrDispatchFilter.java:311)

        at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:222)

        at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:208)

        at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)

        at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585)

        at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)

        at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577)

        at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223)

        at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)

        at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)

        at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)

        at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)

        at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)

        at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)

        at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110)

        at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)

        at org.eclipse.jetty.server.Server.handle(Server.java:499)

        at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)

        at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)

        at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)

        at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)

        at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)

        at java.lang.Thread.run(Thread.java:748)

I saw the question https://community.hortonworks.com/questions/99367/solr-kerberos-error-gssexception-failure-unspecifi.html

but solution in this did not work for me .

attaching curl kerberos debug log.

curl-krb.txt

@Vipin Rathor can you please help me on this?

Re: solr api is throwing error Cannot find key of appropriate type to decrypt AP REP - AES256

skoneru — Mon, 25 Dec 2017 14:50:29 GMT

Please, refer to the steps in https://community.hortonworks.com/articles/15159/securing-solr-collections-with-ranger-kerberos.html

question Re: solr api is throwing error Cannot find key of appropriate type to decrypt AP REP - AES256 in Archives of Support Questions (Read Only)

solr api is throwing error Cannot find key of appropriate type to decrypt AP REP - AES256

Re: solr api is throwing error Cannot find key of appropriate type to decrypt AP REP - AES256