Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

password incorrect

avatar
New Member

After I "Enable Kerberos" I execute kinit, it reminds me to input password. But i do not set password for it.

1 ACCEPTED SOLUTION

avatar
Master Mentor

@Zhao Chaofeng

Are you passing the keytab path to it?

Example:

Syntax:
kinit -kt  /PATH/TO/Keytab_file  $PRINCIPAL_NAME

Example:
kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-ClusterDemo@EXAMPLE.COM

.

View solution in original post

5 REPLIES 5

avatar
Master Mentor

@Zhao Chaofeng

Are you passing the keytab path to it?

Example:

Syntax:
kinit -kt  /PATH/TO/Keytab_file  $PRINCIPAL_NAME

Example:
kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-ClusterDemo@EXAMPLE.COM

.

avatar
New Member

Yes, I kinit -kt first, and then execute kadmin.local.

avatar
New Member
My operation is:
[root@bigdata013 centos]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-bigdata@ISTUARY.COM
[root@bigdata013 centos]# kinit hdfs-bigdata@ISTUARY.COM
Password for hdfs-bigdata@ISTUARY.COM: 
kinit: Password incorrect while getting initial credentials

avatar
Master Mentor

@Zhao Chaofeng

Looks like your kinit was successful earlier when you run the command as it did not show any error. So i think the ticket was generated fine.

[root@bigdata013 centos]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-bigdata@ISTUARY.COM

After running the above command did you check the output of "klist" command to see if you got the kerberos ticket?

[root@bigdata013 centos]# klist

.

Example at my end:

# kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-JoyCluster@EXAMPLE.COM 

# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: hdfs-JoyCluster@EXAMPLE.COM

Valid starting     Expires            Service principal
01/23/17 10:00:20  01/23/17 10:00:50  krbtgt/EXAMPLE.COM@EXAMPLE.COM
    renew until 01/23/17 10:00:20

.

avatar
New Member

Yes, I run the command success before, but it is not right when I run the command after I install LDAP.

Thank you, I will retry a minute.