Reply
Contributor
Posts: 78
Registered: ‎06-19-2014

Peer indicated failure: GSS initiate failed

cdh5.0.2+kerberos security

hue3.5

the jobtracker log,every 5 seconds,there is a exception:

---------------------------------------------------------------------------------------------------------------------------------------------------------------

2014-06-25 18:44:45,370 ERROR org.apache.hadoop.thriftfs.SanerThreadPoolServer: Error occurred during processing of message.

java.lang.RuntimeException: com.cloudera.hue.org.apache.thrift.transport.TTransportException: Peer indicated failure: GSS initiate failed
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:219)
at org.apache.hadoop.thriftfs.HadoopThriftAuthBridge$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge.java:237)
at org.apache.hadoop.thriftfs.HadoopThriftAuthBridge$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge.java:235)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:356)
at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1528)
at org.apache.hadoop.thriftfs.HadoopThriftAuthBridge$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge.java:235)
at org.apache.hadoop.thriftfs.SanerThreadPoolServer$WorkerProcess.run(SanerThreadPoolServer.java:277)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:744)
Caused by: com.cloudera.hue.org.apache.thrift.transport.TTransportException: Peer indicated failure: GSS initiate failed
at com.cloudera.hue.org.apache.thrift.transport.TSaslTransport.receiveSaslMessage(TSaslTransport.java:190)
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport.handleSaslStartMessage(TSaslServerTransport.java:125)
at com.cloudera.hue.org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:253)
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41)
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216)
... 10 more

---------------------------------------------------------------------------------------------------------------------------------------------------------------

I confige the security with cloudera manager,and now kerberos security run normally.The test mapreduce is ok.

 

Thanks.

 

Posts: 1,892
Kudos: 431
Solutions: 302
Registered: ‎07-31-2013

Re: Peer indicated failure: GSS initiate failed

Have you also added a KT_RENEWER role to Hue after enabling security, as the documentation dictates: http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.8.2/Configuring-Hadoop-Secur...

This would be necessary in order to allow Hue to talk to the JobTracker Thrift plugin with Kerberos+SASL, and will remove such exceptions.
New Contributor
Posts: 1
Registered: ‎03-31-2014

Re: Peer indicated failure: GSS initiate failed

Hi Harsh,

Should we do same for Oozie node also for KT renewal role?

Announcements