Error : javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:212) at org.apache.hadoop.hbase.security.HBaseSaslRpcClient.saslConnect
This Warning message is generated in every 5th second. Can somebody help me with this, as per my investigation it seems to be a Licence issue.
1. Did you generate keytabs for hbase?
2. Can hbase process read the keytab
3. Is the principal in the keytab correct?
Few reasons why 3 happens. But mostly hbase thinks its running on a host that it is not. Common causes DNS and hosts name resolution or incorrect resolution on a multihomed host such that hbase thinks it should be hbase/interface1 but the keytab lists hbase/interface2 or whatever the name is.
Fixes if your clients are not on the same hosts as servers you can modify hbase-site to reflect actual principal names. You can also craft a JAAS file to override the hbase principal name without altering the contents of hbase-site