Reply
Highlighted
Contributor
Posts: 25
Registered: ‎09-04-2018
Accepted Solution

Failed to renew token: Kind: kms-dt during running Pig job

[ Edited ]

Dear all!

 

I have kerberized cluster on Cloudera Express 5.9.3, Java Version: 1.7.0_67.

Since I turned on HDFS Data At Rest Encryption using Java Keystore KMS I recieve an error in Pig job

 

 Failed to renew token: Kind: kms-dt, Service: 10.6.1.44:16000, Ident: (kms-dt owner=hdfs, renewer=yarn, realUser=, issueDate=1547451323413, maxDate=1548056123413, sequenceNumber=2, masterKeyId=2)

 

Yarn log:

 

Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect

Caused by: java.security.UnrecoverableKeyException: Password verification failed

 

I have checked the pessword by doing keytool -list, the password is correct.

 

Please, help me to resolve this problem.

 

Contributor
Posts: 25
Registered: ‎09-04-2018

Re: Failed to renew token: Kind: kms-dt during running Pig job

Passwords for trust store and keystore must be the same. After changing the password for trust store everything went good.

Announcements

Our community is getting a little larger. And a lot better.


Learn More about the Cloudera and Hortonworks community merger planned for late July and early August.