Created on 01-03-2017 05:02 AM - edited 09-16-2022 03:52 AM
After ambari-server setup-security the ambari-server.log is
03 Jan 2017 12:54:26,153 ERROR [main] KerberosChecker:115 - Unable to obtain password from user 03 Jan 2017 12:54:26,154 ERROR [main] AmbariServer:927 - Failed to run the Ambari Server org.apache.ambari.server.AmbariException: Ambari Server Kerberos credentials check failed. Check KDC availability and JAAS configuration in /etc/ambari-server/conf/krb5JAASLogin.conf at org.apache.ambari.server.controller.utilities.KerberosChecker.checkJaasConfiguration(KerberosChecker.java:116) at org.apache.ambari.server.controller.AmbariServer.main(AmbariServer.java:922)
Created 01-03-2017 05:13 AM
@Zhao Chaofeng Can you please show the /etc/ambari-server/conf/krb5JAASLogin.confconfig.
You have executed setup-security to configure jass for ambari server? Please make sure that you have set complete keytab path while configuring. It should be something like below and verify the keytab and principal by doing kinit
[root@hdp1 conf]# egrep "principal|keytab" /etc/ambari-server/conf/krb5JAASLogin.conf keyTab="/etc/security/keytabs/ambari.server.keytab" principal="ambari-server-hdp25@RAGHAV.COM" #kinit -kt /etc/security/keytabs/ambari.server.keytab ambari-server-hdp25
Created 01-03-2017 05:13 AM
@Zhao Chaofeng Can you please show the /etc/ambari-server/conf/krb5JAASLogin.confconfig.
You have executed setup-security to configure jass for ambari server? Please make sure that you have set complete keytab path while configuring. It should be something like below and verify the keytab and principal by doing kinit
[root@hdp1 conf]# egrep "principal|keytab" /etc/ambari-server/conf/krb5JAASLogin.conf keyTab="/etc/security/keytabs/ambari.server.keytab" principal="ambari-server-hdp25@RAGHAV.COM" #kinit -kt /etc/security/keytabs/ambari.server.keytab ambari-server-hdp25
Created 01-03-2017 05:28 AM
Oh, I modify /etc/ambari-server/conf/krb5JAASLogin.conf corresponding with yours, and it's ok now. Thank you.
Created 01-03-2017 05:30 AM
Thank you .. Can you please accept the answer if the problem is fixed.
Created 10-20-2017 03:55 PM
Hi All,
I am receiving the same error "Ambari Server Kerberos credentials check failed" when I try to start Ambari server. My settings are same as described above. when I am trying to kinit it is giving error" kinit: Preauthentication failed while getting initial credentials".
Please be informed that we are using Active directory for authentication.
Please let me know what to do.
Thanks