Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]
Created 11-29-2016 09:01 PM
config-kerb.jpg kdc-error.txt ambari-error.jpg
I have installed the the KDC server and created principals . The configure Kerberos part goes fine from the ambari console and so does the install client Kerberos part , but the test client part is failing with some internal exception , please see the upload ambari log file and and the screen shots for the configuration screen .
Created 11-30-2016 02:31 PM
Looking at the error:
29 Nov 2016 15:49:43,526 WARN [ambari-client-thread-1242] MITKerberosOperationHandler:459 - Failed to execute kadmin:
Command: [/usr/bin/kadmin, -s, hadoop1.tolls.dot.state.fl.us, -p, K/[email protected], -r, TOLLS.DOT.STATE.FL.US, -q, get_principal K/[email protected]]
ExitCode: 1
STDOUT: Authenticating as principal K/[email protected] with password.
STDERR: kadmin: Clients credentials have been revoked while initializing kadmin interfaceIt appears that the admin account you are using has been locked out. See http://web.mit.edu/Kerberos/krb5-1.13/doc/admin/lockout.html for more information on this.
Created 11-30-2016 06:45 PM
changed that , still same , kdc cant find the master key
Created 11-30-2016 03:53 PM
even the service wont start now
[root@hadoop1 etc]# service krb5kdc start
Starting Kerberos 5 KDC: krb5kdc: cannot initialize realm TOLLS.DOT.SATE.FL.US - see log file for details
[FAILED]
tail -100f /var/log/krb5kdc.log
Nov 30 10:50:36 hadoop1 krb5kdc[18920](info): closing down fd 9
Nov 30 10:50:36 hadoop1 krb5kdc[18920](info): closing down fd 7
Nov 30 10:50:36 hadoop1 krb5kdc[18920](info): shutting down
krb5kdc: Can not fetch master key (error: No such file or directory). - while fetching master key K/M for realm TOLLS.DOT.SATE.FL.US
e
Created 11-30-2016 04:23 PM
It seems like your KDC installation is all messed up. Can you remove the client and server packages as well as the /var/kerberos directory and its contents? Then try to reinstall it.
Here is a script that I use for Centos6. If you have a different OS, let me know and I might have a script for that. In any case the script creates a KDC with the realm of EXAMPLE.COM. You can edit the script to change this. It also creates an administrator principal - admin/[email protected] (password: admin).
Created 11-30-2016 07:12 PM
ah there was a typo in the krb5.conf file . I typed "SATE" instead of "STATE" . so I can login into kadmin now and will try to re-install via ambari and report.
Created 11-30-2016 08:13 PM
thanks all for your help I could install Kerberos
Created 01-23-2017 08:15 PM
Hello Sami,
Can You please share the solution, am also facing the same issue.