Support Questions

Find answers, ask questions, and share your expertise
Check out our newest addition to the community, the Cloudera Data Analytics (CDA) group hub.

Failed to start Master services while launching kerberized cluster via Blueprint or API.

Hi, I am trying to enable kerberos from ambari UI it works fine


when I am trying to add kerberos as a service through blueprint or api's, it fails to start namenode and master services. I am getting following error while NAMENODE FORMAT: Login failure for nn/ from keytab /etc/security/keytabs/nn.service.keytab: Unable to obtain password from user .

I could see principles have been created at kerberos server and keytab files are also been created in /etc/security/keytab

I have also tried kinit -kt /etc/security/keytab/nn.service.keytab nn/

this gives an error :-

Keytab contains no suitable keys for host/ while getting initial credentials


Super Mentor

@Girish Mane

Can you check the two things

1. The permission on keytab

2. try doing a "klist" to see if it contains the correct principal in it ? The Encryption as well.

klist -kte /etc/security/keytab/nn.service.keytab


Whatever principal name you see in the output of the above command try doing the "kinit" with that.

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.