I have enabled Kerberos in CDH cluster,and all is running fine but the Hue service with an error shows that ' role's process failed to start
Below is error log.Anyone has idea about this?Please help me.Thank you very much.
``Couldn't renew kerberos ticket in order to work around Kerberos 1.8.1 issue. Please check that the ticket for 'hue/dnode0@EXAMPLE.COM' is still renewable: $ kinit -f -c /tmp/hue_krb5_ccache If the 'renew until' date is the same as the 'valid starting' date, the ticket cannot be renewed. Please check your KDC configuration, and the ticket renewal policy (maxrenewlife) for the 'hue/dnode0@EXAMPLE.COM' and `krbtgt' principals. [17/Nov/2016 17:44:28 ] settings INFO Welcome to Hue 3.9.0
A Kerberos ticket has two lifetimes: a ticket lifetime and a renewable lifetime.
From the error message I suspect that on your cluster these two are the same, meaning that the tickets cannot be renewed before expiry.
Look for these configuration options in /etc/krb5.conf or on your kdc.conf on the kerberos server:
ticket_lifetime = 2d renew_lifetime = 7d
Somewhere these two is configured to be identical.
I have set these values in the config files.flow cloudera official documents.It seems not work
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
max_life = 25h
max_renewable_life = 4w
default_principal_flags = +renewable