- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
After enabling kerberos, unable to access any of the Web UI.
- Labels:
-
Apache Hadoop
Created on 10-16-2019 06:11 AM - last edited on 10-16-2019 11:05 AM by cjervis
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
After enabling kerberos, unable to access any of the Web UI. As per HWX docs, SPNEGO has been enabled, but still facing issue in accessing the Web UI.
Created 10-16-2019 12:42 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you set these parameters?
Configure the following environment properties for MIT Kerberos.
KRB5_CONFIG: Path for the kerberos ini file.
KRB5CCNAME: Path for the kerberos credential cache file.
Please revert
Created on 10-17-2019 01:11 AM - edited 10-17-2019 01:11 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
the variables are configured in the /etc/krb5.conf
Created 10-16-2019 02:57 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@Shelton After changing the realm in KDC.conf, now able to execute HDFS commands.
After enabling kerberos, unable to access the any of the WEB UI like hdfs,yarn,mapreduce
Created 10-16-2019 10:50 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There are extended desktop configuration items necessary to clue the windows desktop in to what REALM and KDC the cluster is using, as well as what domain names (the ones used by the cluster) map to which kerberos REALM.
You need to run this on windows cmd as admin
ksetup /addkdc <REALM> <KDC hostname>
ksetup /addhosttorealmmap <httpFS hostname> <REALM>
and set SPNEGO settings on browser
Created 10-17-2019 01:19 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am getting below error while doing ktsetup
Failed to create Kerberos key: 5 (0x5)
Failed to open Kerberos Key: 0x5
Failed /AddKdc : 0xc0000001
Created 10-17-2019 02:32 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You should be executing the commands as windows admin user only with corresponding realm and kdc parameters
Created 10-17-2019 02:46 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ok. ksetup /addhosttorealmmap <httpFS hostname> <REALM>
httpFS hostname mean namenode host name ?
Created 10-17-2019 02:56 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
httpFS hostname is the hostname of the web UI you want access to.
This command is used to map the domain name being used by cluster nodes to the kerberos REALM they belong to. A specific hostname with domainname can be configured, or all hosts in a domain with a "." before the domain or subdomain.
Eg:
C:\Windows\system32>ksetup /addhosttorealmmap .example.com CLUSTER.REALM
It can be run multiple times to add specific domains/hosts to the mapping to the CLUSTER.REALM.
Created 10-17-2019 03:31 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ksetup has done and changed the below property in mozilla firefoz as per HWX docs, but still the name node UI is not opening
For FireFox:
Navigate to the about:config URL (type about:config in the address box, then press the Enter key).
Scroll down to network.negotiate-auth.trusted-uris and change its value to your cluster domain name (For example, .hwx.site).
Change the value of network.negotiate-auth.delegation-uris to your cluster domain name (For example, .hwx.site).