Support Questions

Find answers, ask questions, and share your expertise

Authentication failed when trying to open /webhdfs/v1/?op=LISTSTATUS: Unauthorized.

I get this after 'kerberizing' my cluster when open "Browse the File System" from HDFS U.I. Authentication failed when trying to open /webhdfs/v1/?op=LISTSTATUS: Unauthorized. Any ideas how to fix it ?


also cannot access "view logs" on same U.I. - error dr.who not authorized

@Phil G

Can you make sure you have property in hdfs-site.xml - "dfs.web.authentication.kerberos.principal" and set to right value

Pls refer -

value is correct

Try the same command after performing kinit -


keytab file seems to have correct principals, I loaded it in ktutil (/etc/security/keytabs/spnego.service.keytab) but kinit returns

kinit: Keytab contains no suitable keys for HTTP/_HOST@MYREALM.COM while getting initial credentials

after some fiddling kinit loads keytab but issue remains

@Phil G ,

With kerberos enabled you need to enable SPNEGO authentication for kerberos.

Could you follow the below link,

Hope this helps.

@Phil G

Please find steps below and make sure it works -

  1. klist -kt /etc/security/keytabs/spnego.service.keytab
  2. kinit -kt /etc/security/keytabs/spnego.service.keytab <Principal> <-- [you will get principal from above command]
  3. klist <-- Make sure not you have valid ticket
  4. curl --negotiate -u:<anyuser> "http://$<Host_Name>:$<Port>/webhdfs/v1/user/?op=LISTSTATUS"

Why "anyuser" in above command ? Pls refer -


for default your are using dr.who to open the page, bu dr.who don't have the permission. you can check "hadoop.http.staticuser.user" in core-site.xml

New Contributor

problem resolved??I met the same problem~~@Phil G

did u able to solve that problem?m facing the same issue.