I get this after 'kerberizing' my cluster when open "Browse the File System" from HDFS U.I. Authentication failed when trying to open /webhdfs/v1/?op=LISTSTATUS: Unauthorized. Any ideas how to fix it ?
also cannot access "view logs" on same U.I. - error dr.who not authorized
Can you make sure you have property in hdfs-site.xml - "dfs.web.authentication.kerberos.principal" and set to right value
Try the same command after performing kinit -
kinit -kt <PATH_TO_KEYTAB> <YOUR-PRINCIPAL-ID>
keytab file seems to have correct principals, I loaded it in ktutil (/etc/security/keytabs/spnego.service.keytab) but kinit returns
kinit: Keytab contains no suitable keys for HTTP/_HOST@MYREALM.COM while getting initial credentials
@Phil G ,
With kerberos enabled you need to enable SPNEGO authentication for kerberos.
Could you follow the below link,
Hope this helps.
Please find steps below and make sure it works -
Why "anyuser" in above command ? Pls refer - http://docs.hortonworks.com/HDPDocuments/HDP1/HDP-1.2.4/bk_webhdfs/content/ch_webhdfs-user.html
for default your are using dr.who to open the page, bu dr.who don't have the permission. you can check "hadoop.http.staticuser.user" in core-site.xml