Failed to renew token: Kind: kms-dt during running Pig job

[#1]

Dear all!

I have kerberized cluster on Cloudera Express 5.9.3, Java Version: 1.7.0_67.

Since I turned on HDFS Data At Rest Encryption using Java Keystore KMS I recieve an error in Pig job

 Failed to renew token: Kind: kms-dt, Service: 10.6.1.44:16000, Ident: (kms-dt owner=hdfs, renewer=yarn, realUser=, issueDate=1547451323413, maxDate=1548056123413, sequenceNumber=2, masterKeyId=2)

Yarn log:

Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect

Caused by: java.security.UnrecoverableKeyException: Password verification failed

I have checked the pessword by doing keytool -list, the password is correct.

Please, help me to resolve this problem.

[#2 · Accepted solution]

Passwords for trust store and keystore must be the same. After changing the password for trust store everything went good.