After enabling kerberos services fails to start giving error in logs "Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections"

[#1]

I am trying to kerberized cluster and all machines are adjoined with centrify.

I checked without kerberization all services are running fine but after kerberization of the cluster server logs showing following error:

Failed on local exception: java.io.IOException: Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections.; Host Details : local host is ; destination host is

[#2]

@Ajit Sonawane Which version of ambari are you using ? What steps did you follow to kerberize the cluster?

I hope you have followed the steps as mentioned in https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.1/bk_security/content/configuring_amb_hdp_for.... If not please follow the doc to kerberize the cluster.

If you have followed the steps in the doc, then can you check /etc/security/keytabs/ and ensure that all the service keytabs are generated?

[#3]

Hi @ssharma,

Issue is resoleved, when I added following property to core-site.xml

ipc.client.fallback-to-simple-auth-allowed=true.

I think this issue occurs when you are dealing with cluster which was earlier kerberized and then dekerberized and vice-versa.

Thanks,

Ajit

[#4]

Hi Ajit-

If you need any additional resources, Centrify has a detailed integration guide that walks you through Kerberization and many other facets of the joint solution. Please feel free to reach out if you need any resources from our side.

-- Mike