Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

After enabling kerberos services fails to start giving error in logs "Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections"

Highlighted

After enabling kerberos services fails to start giving error in logs "Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections"

New Contributor

I am trying to kerberized cluster and all machines are adjoined with centrify.

I checked without kerberization all services are running fine but after kerberization of the cluster server logs showing following error:

Failed on local exception: java.io.IOException: Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections.; Host Details : local host is ; destination host is

3 REPLIES 3

Re: After enabling kerberos services fails to start giving error in logs "Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections"

Expert Contributor

@Ajit Sonawane Which version of ambari are you using ? What steps did you follow to kerberize the cluster?

I hope you have followed the steps as mentioned in https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.1/bk_security/content/configuring_amb_hdp_for.... If not please follow the doc to kerberize the cluster.

If you have followed the steps in the doc, then can you check /etc/security/keytabs/ and ensure that all the service keytabs are generated?

Re: After enabling kerberos services fails to start giving error in logs "Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections"

New Contributor

Hi @ssharma,

Issue is resoleved, when I added following property to core-site.xml

ipc.client.fallback-to-simple-auth-allowed=true.

I think this issue occurs when you are dealing with cluster which was earlier kerberized and then dekerberized and vice-versa.

Thanks,

Ajit

Re: After enabling kerberos services fails to start giving error in logs "Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections"

New Contributor

Hi Ajit-

If you need any additional resources, Centrify has a detailed integration guide that walks you through Kerberization and many other facets of the joint solution. Please feel free to reach out if you need any resources from our side.

-- Mike

Don't have an account?
Coming from Hortonworks? Activate your account here