Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

Kerberos authentication issue

avatar
Super Collaborator

I am trying to get a ticket from Kerberos but its failing . I have created another keytab but no luck .

[root@hadoop1 scripts]# klist -kte /etc/krb5.keytab | grep hdfs
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96)
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96)
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1)
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac)
[root@hadoop1 scripts]#
[root@hadoop1 scripts]# klist -kte  /etc/security/keytabs/hdfs.headless.keytab | grep hdfs
Keytab name: FILE:/etc/security/keytabs/hdfs.headless.keytab
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des-cbc-md5)
[root@hadoop1 scripts]#

[root@hadoop1 scripts]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US
kinit: Password incorrect while getting initial credentials
[root@hadoop1 scripts]#

[root@hadoop1 scripts]# kinit -kt /etc/krb5.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US
kinit: Password incorrect while getting initial credentials
[root@hadoop1 scripts]#

1 ACCEPTED SOLUTION

avatar
Super Collaborator

this article fixed the issue. The key version number was mismatching between the keytab and the kdc . The keytab files must have been hanging around from previous installation .

https://cwiki.apache.org/confluence/display/AMBARI/Automated+Kerberization+Troubleshooting

View solution in original post

1 REPLY 1

avatar
Super Collaborator

this article fixed the issue. The key version number was mismatching between the keytab and the kdc . The keytab files must have been hanging around from previous installation .

https://cwiki.apache.org/confluence/display/AMBARI/Automated+Kerberization+Troubleshooting