Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

[CDH 5.8 Kerberos] Generate Missing Credentials Error

Highlighted

[CDH 5.8 Kerberos] Generate Missing Credentials Error

New Contributor

Greetings all ALL

 

I have installed and sucessfully configured Kerberos for CDH 5.8. But Post Confiugration unable to access hdfs from command line, tried the following way but no ...

 

# su - hdfs

$ kinit  hdfs@MYREALM.COM 

$ klist    --->    ticket is assigned ...

 

Pls  any help/suggestions 

 

Regards

Syed

3 REPLIES 3
Highlighted

Re: [CDH 5.8 Kerberos] hdfs error : hdfs dfs -ls / ls: SIMPLE authentication is not enabled. Avail

New Contributor

Is REALM name and DOMAIN name required to be same?

Re: [CDH 5.8 Kerberos] hdfs error : hdfs dfs -ls / ls: SIMPLE authentication is not enabled. Avail

Cloudera Employee

Hello bigdatatz,

 

It doesn't have to be the same thing, but it needs to be mapped top the domain in the /etc/krb5.conf file either by the default_realm or in the [realms] section. Can you give us a bit more detail on the error (e.g. exact error messsage)?

 

Regards,

Highlighted

Re: [CDH 5.8 Kerberos] Generate Missing Credentials Error

Contributor

Kerberos realm can be different from the domain.

 

There are plenty things, which can go wrong (clock, proper principals, krb5.conf, configurations, ...). On client-side (the hdfs and yarn utilities), you can try some debugging:

 

export HADOOP_OPTS="-Dsun.security.krb5.debug=true"
hdfs dfs -ls /
yarn application -list

 

The similar way for daemons: adding '-Dsun.security.krb5.debug=true' into HADOOP_OPTS in /etc/default/hadoop, restart, and the checking the logs.

 

Don't have an account?
Coming from Hortonworks? Activate your account here