Support Questions
Find answers, ask questions, and share your expertise

Error : "exception being generated by hbase on continuous basis" while monitoring Hbase for a cluster.

Error : javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:212) at org.apache.hadoop.hbase.security.HBaseSaslRpcClient.saslConnect

This Warning message is generated in every 5th second. Can somebody help me with this, as per my investigation it seems to be a Licence issue.

3 REPLIES 3

@Pranshu Pranshu

It has to do with Kerberos setup. You have to check HBase configs for Kerberos settings.

HBase service can't find kdc

@Neeraj Sabharwal Thanks for your assistance.

New Contributor

1. Did you generate keytabs for hbase?

2. Can hbase process read the keytab

3. Is the principal in the keytab correct?

Few reasons why 3 happens. But mostly hbase thinks its running on a host that it is not. Common causes DNS and hosts name resolution or incorrect resolution on a multihomed host such that hbase thinks it should be hbase/interface1 but the keytab lists hbase/interface2 or whatever the name is.

Fixes if your clients are not on the same hosts as servers you can modify hbase-site to reflect actual principal names. You can also craft a JAAS file to override the hbase principal name without altering the contents of hbase-site