HDP-2.6.5 - Facing Kerberos Installation Issue

[#1]

Hi Team,

We are configuring Kerberos using FreeIPA. While installing Kerberos using Ambari wizard, we are getting following error:

ERROR [Server Action Executor Worker 2824] IPAKerberosOperationHandler:303 - Failed to execute ipa query: service-add --ok-as-delegate=TRUE HTTP/p-hdp-d1.hdp.prod.test.com@APPS.TEST.COM
STDOUT:
STDERR: ipa: ERROR: Host 'p-hdp-d1.hdp.prod.test.com' does not have corresponding DNS A/AAAA record

But ping to this server is working fine:

-sh-4.2$ ping p-hdp-d1.hdp.prod.test.com
PING p-hdp-d1.hdp.prod.test.com (10.10.33.21) 56(84) bytes of data.
64 bytes from p-hdp-d1.hdp.prod.test.com (10.10.33.21): icmp_seq=1 ttl=64 time=0.092 ms
64 bytes from p-hdp-d1.hdp.prod.test.com (10.10.33.21): icmp_seq=2 ttl=64 time=0.090 ms
64 bytes from p-hdp-d1.hdp.prod.test.com (10.10.33.21): icmp_seq=3 ttl=64 time=0.095 ms

How to resolve this?

Please suggest. Thanks in advance.

Thanks,

Bhushan

[#2]

STDERR: ipa: ERROR:Host'p-hdp-d1.hdp.prod.test.com' does not have corresponding DNS A/AAAA record

This is something related to the name resolution,

Check how is the name resolution configured for the hosts?

Is it /etc/hosts ? or DNS is configured?

if its a DNS, kindly check if A record in DNS is configured?

[#3]

@Gulshad Ansari

A record is configured in DNS but still getting same exception. Please suggest.

# dig p-hdp-d1.hdp.prod.test.com


; <<>> DiG 9.9.4-RedHat-9.9.4-61.el7_5.1 <<>> p-hdp-d1.hdp.prod.test.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31190
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3


;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;p-hdp-d1.hdp.prod.test.com. IN A


;; ANSWER SECTION:
p-hdp-d1.hdp.prod.test.com. 1200 IN A 10.10.33.46


;; AUTHORITY SECTION:
hdp.prod.test.com.  86400   IN      NS      vc-ipa001a.apps.test.com.
hdp.prod.test.com.  86400   IN      NS      vc-ipa001b.apps.test.com.


;; ADDITIONAL SECTION:
vc-ipa001a.apps.test.com. 1200 IN   A       10.10.70.40
vc-ipa001b.apps.test.com. 1200 IN   A       10.10.70.41


;; Query time: 1 msec
;; SERVER: 10.10.70.40#53(10.10.70.40)
;; WHEN: Mon Dec 24 02:27:37 EST 2018
;; MSG SIZE  rcvd: 168

Output of nslookup command:

# nslookup p-hdp-d1.hdp.prod.test.com 
Server:         10.10.70.40
Address:        10.10.70.40#53 
Name:   p-hdp-d1.hdp.prod.test.com
Address: 10.10.33.46 
#

[#4]

@Bhushan Kandalkar

Did you resolve the issue. I am getting same error.

IPAKerberosOperationHandler:323 - Failed to execute the following command:

/usr/bin/ipa service-add activity_explorer/deepak-bp-ha-hdp-managementtest.cloud.int@CLOUD.INT

STDOUT:

STDERR: ipa: ERROR: Host does not have corresponding DNS A/AAAA record