Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

Regenerate Kerberos Keytab for a particular service?

avatar
Rising Star

I installed Ranger & Ambari-Infra in my cluster via Ambari but installed hung up on Setup Keytab. Although, the service installed properly but "ranger-usersync" failed due to service.keytab does not exist.

Can anyone suggest how to re-generate keytab for a particular service?

HDP - 2.5.3, Ambari - 2.4.2.0

1 ACCEPTED SOLUTION

avatar
Master Mentor

@Shashant Panwar

Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.

Texts from 2.5.0.3 Doc:

You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-operations/content/how_to_regenera...

.

View solution in original post

4 REPLIES 4

avatar
Master Mentor

@Shashant Panwar

Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.

Texts from 2.5.0.3 Doc:

You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-operations/content/how_to_regenera...

.

avatar

avatar
Rising Star

Thank you @Namit Maheshwari.

avatar
Rising Star

Thank you guys for the prompt response.

Root cause: Somehow Kerberos admin session was expired which was not creating/setup any key tabs.

Resolution: I fixed it by restarting Ambari. After that, regeneration of ticket resolved the problem.