Support Questions

Find answers, ask questions, and share your expertise
Celebrating as our community reaches 100,000 members! Thank you!

GSS Initiate failed even with a valid kerberos service ticket.

Rising Star

I am launching hbase (1.1.2) on a kerberized cluster (AD). Hbase region server fails to connect to master with following error:

2017-01-20 18:17:23,944 WARN  [regionserver/] regionserver.HRegionServer: error telling master we are up Couldn't setup connection for srvuser/ to srvuser/
at org.apache.hadoop.hbase.ipc.AbstractRpcClient.callBlockingMethod(
at org.apache.hadoop.hbase.ipc.AbstractRpcClient$BlockingRpcChannelImplementation.callBlockingMethod(
at org.apache.hadoop.hbase.protobuf.generated.RegionServerStatusProtos$RegionServerStatusService$BlockingStub.regionServerStartup(
at org.apache.hadoop.hbase.regionserver.HRegionServer.reportForDuty(


Caused by: org.apache.hadoop.ipc.RemoteException( GSS initiate failed

I turned ON detailed debug logs for kerberos as well as Hbase. I can see that the service ticket is successfully obtained by host a1 for a2:

Found ticket for srvuser/ to go to krbtgt/ADC.EXAMPLE.COM@ADC.EXAMPLE.COM expiring on Sat Jan 21 04:17:10 PST 2017

Found ticket for srvuser/ to go to srvuser/ expiring on Sat Jan 21 04:17:10 PST 2017

Client Principal = srvuser/

Server Principal = srvuser/ Session Key = EncryptionKey: keyType=23 keyBytes

I do not see any errors post the above lines in detailed kerberos level logs so I assume that the problem of GSS Initiate failed has not anything to do with kerberos now else I would have seen some error reported (such as say ticket being corrupted?)

I notice that GSS Initiate failed message without any details reported is specified by experts as one of the most useless messages - Steve's error messages to fear.

Already verified unlimited JCE policy files are present, and that both hosts are using the same encryption algorithm. Can anyone help here? Even if it is about what next steps I can take to debug this?

Thank you!


Super Guru

Nothing jumped out at me from your logs. Sorry I can't be of help with the information you provided. You should consider exercising your HDP support contract if you need more help.

Rising Star

Sure Josh, thanks a lot for taking time to look at these logs.

Master Guru