Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

HDFS NFS3 Running in secure mode, but config doesn't have a keytab

HDFS NFS3 Running in secure mode, but config doesn't have a keytab

New Contributor

Hey All,

Im trying to setup and run HDFS NFS3 Proxy with 'hdfs nfs3 start' but im getting "Running in secure mode, but config doesn't have a keytab" despite having set the following in hdfs-site.xml:

dfs.nfsgateway.kerberos.principal to nfsserver/_HOST@<MYREALMREMOVED> and

dfs.nfsgateway.keytab.file to /etc/security/keytabs/nfsserver.keytab

Im invoking the service as the "nfsserver" user that has an active IPA account/Kerberos ticket.

I can "kinit" no problem and can also run "hdfs dfs -ls /" and get file listings

Any ideas where im going wrong?

Stack dump is as followed:

Exception in thread "main" java.io.IOException: Running in secure mode, but config doesn't have a keytab at org.apache.hadoop.security.SecurityUtil.login(SecurityUtil.java:236) at org.apache.hadoop.security.SecurityUtil.login(SecurityUtil.java:207) at org.apache.hadoop.hdfs.nfs.nfs3.RpcProgramNfs3.<init>(RpcProgramNfs3.java:198) at org.apache.hadoop.hdfs.nfs.nfs3.Nfs3.<init>(Nfs3.java:45) at org.apache.hadoop.hdfs.nfs.nfs3.Nfs3.startService(Nfs3.java:66) at org.apache.hadoop.hdfs.nfs.nfs3.Nfs3.main(Nfs3.java:72) 15/12/16 14:57:29 INFO nfs3.Nfs3Base: SHUTDOWN_MSG:

Hadoop/HDFS version info:

Hadoop 2.6.0.2.2.4.2-2 Subversion git@github.com:hortonworks/hadoop.git -r 22a563ebe448969d07902aed869ac13c652b2872 Compiled by jenkins on 2015-03-31T19:49Z Compiled with protoc 2.5.0 From source with checksum b3481c2cdbe2d181f2621331926e267 This command was run using /usr/hdp/2.2.4.2-2/hadoop/hadoop-common-2.6.0.2.2.4.2-2.jar

3 REPLIES 3
Highlighted

Re: HDFS NFS3 Running in secure mode, but config doesn't have a keytab

Guru

try adding

dfs.nfs.kerberos.principal=nfsserver/_HOST@<MYREALMREMOVED>
dfs.nfs.keytab.file=/etc/security/keytabs/nfsserver.keytab
Highlighted

Re: HDFS NFS3 Running in secure mode, but config doesn't have a keytab

In Hadoop version 2.6.0, the nfs params are not prefixed with "dfs.". See https://hadoop.apache.org/docs/r2.6.0/hadoop-project-dist/hadoop-hdfs/hdfs-default.xml , and search for "nfs".

Therefore the correct parameters to set in hdfs-site.xml are

nfs.kerberos.principal=nfsserver/_HOST@<MYREALMREMOVED>
nfs.keytab.file=/etc/security/keytabs/nfsserver.keytab
Highlighted

Re: HDFS NFS3 Running in secure mode, but config doesn't have a keytab

Mentor

@Thomas Roffe has this been resolved? Please accept best answer or provide your own solution.

Don't have an account?
Coming from Hortonworks? Activate your account here