Support Questions

Find answers, ask questions, and share your expertise
Celebrating as our community reaches 100,000 members! Thank you!

CDP 7.x replication kerberos error

Expert Contributor

Hello Experts,


We are trying to do hdfs replication from prod(CDH 5.x) to test(CDP 7.x) and getting a kerberos principal error:


Server has invalid Kerberos principal: hdfs/, expecting: hdfs/


Not sure why it is picking up TEST realm instead of the PROD realm in the job. The Peer test shows connected fine. Thanks!



New Contributor


did you check your krb5.conf file ?

Expert Contributor

Yes /etc/krb5.conf was the issue in the destination TST cluster. Specifically the [domain_realm] section did not have proper mapping for the replication source prod hosts and the prod realm. Since the PRD and TST hosts were all in the same domain so it was not easy to map the domain and realm using just the = PRODREALM . Instead we had to specify the individual source prod hosts in the destination TST /etc/krb5.conf file as below:

prodhostxx1 = PRODREALM
prodhostxx2 = PRODREALM
prodhostxx3 = PRODREALM
etc. specify all the source prod hosts here

If we don't specify the prodhosts like above replication doesn't know how to map the prodhosts to the PRODREALM and picks up the default TSTREALM which is why the original wrong realm error happened. Thanks!