Greetings all ALL
I have installed and sucessfully configured Kerberos for CDH 5.8. But Post Confiugration unable to access hdfs from command line, tried the following way but no ...
# su - hdfs
$ kinit hdfs@MYREALM.COM
$ klist ---> ticket is assigned ...
Pls any help/suggestions
Is REALM name and DOMAIN name required to be same?
It doesn't have to be the same thing, but it needs to be mapped top the domain in the /etc/krb5.conf file either by the default_realm or in the [realms] section. Can you give us a bit more detail on the error (e.g. exact error messsage)?
Kerberos realm can be different from the domain.
There are plenty things, which can go wrong (clock, proper principals, krb5.conf, configurations, ...). On client-side (the hdfs and yarn utilities), you can try some debugging:
export HADOOP_OPTS="-Dsun.security.krb5.debug=true" hdfs dfs -ls / yarn application -list
The similar way for daemons: adding '-Dsun.security.krb5.debug=true' into HADOOP_OPTS in /etc/default/hadoop, restart, and the checking the logs.