Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]
Created on 01-03-2017 05:02 AM - edited 09-16-2022 03:52 AM
After ambari-server setup-security the ambari-server.log is
03 Jan 2017 12:54:26,153 ERROR [main] KerberosChecker:115 - Unable to obtain password from user 03 Jan 2017 12:54:26,154 ERROR [main] AmbariServer:927 - Failed to run the Ambari Server org.apache.ambari.server.AmbariException: Ambari Server Kerberos credentials check failed. Check KDC availability and JAAS configuration in /etc/ambari-server/conf/krb5JAASLogin.conf at org.apache.ambari.server.controller.utilities.KerberosChecker.checkJaasConfiguration(KerberosChecker.java:116) at org.apache.ambari.server.controller.AmbariServer.main(AmbariServer.java:922)
Created 01-03-2017 05:13 AM
@Zhao Chaofeng Can you please show the /etc/ambari-server/conf/krb5JAASLogin.confconfig.
You have executed setup-security to configure jass for ambari server? Please make sure that you have set complete keytab path while configuring. It should be something like below and verify the keytab and principal by doing kinit
[root@hdp1 conf]# egrep "principal|keytab" /etc/ambari-server/conf/krb5JAASLogin.conf
keyTab="/etc/security/keytabs/ambari.server.keytab"
principal="[email protected]"
#kinit -kt /etc/security/keytabs/ambari.server.keytab ambari-server-hdp25
Created 01-03-2017 05:13 AM
@Zhao Chaofeng Can you please show the /etc/ambari-server/conf/krb5JAASLogin.confconfig.
You have executed setup-security to configure jass for ambari server? Please make sure that you have set complete keytab path while configuring. It should be something like below and verify the keytab and principal by doing kinit
[root@hdp1 conf]# egrep "principal|keytab" /etc/ambari-server/conf/krb5JAASLogin.conf
keyTab="/etc/security/keytabs/ambari.server.keytab"
principal="[email protected]"
#kinit -kt /etc/security/keytabs/ambari.server.keytab ambari-server-hdp25
Created 01-03-2017 05:28 AM
Oh, I modify /etc/ambari-server/conf/krb5JAASLogin.conf corresponding with yours, and it's ok now. Thank you.
Created 01-03-2017 05:30 AM
Thank you .. Can you please accept the answer if the problem is fixed.
Created 10-20-2017 03:55 PM
Hi All,
I am receiving the same error "Ambari Server Kerberos credentials check failed" when I try to start Ambari server. My settings are same as described above. when I am trying to kinit it is giving error" kinit: Preauthentication failed while getting initial credentials".
Please be informed that we are using Active directory for authentication.
Please let me know what to do.
Thanks