Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Import KDC Account Manager Credentials

avatar
Explorer

I try to configure kerberos authentication using FreeIPA a the end of KDC setup in CM I have this error

/opt/cloudera/cm/bin/import_credentials_ipa.sh failed with exit code 1 and output of <<
+ export PATH=/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
+ PATH=/usr/kerberos/bin:/usr/kerberos/sbin:/usr/lib/mit/sbin:/usr/sbin:/usr/lib/mit/bin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
+ KEYTAB_OUT=/var/run/cloudera-scm-server/cmf10626668162316842812.keytab
+ USER=USERNAME-REDACTED
+ passwd=BUNDLE-REDACTED KVNO=1
+ KRBBIND_USER=cmadmin-2fe305e1
+ KRBBIND_USER_ROLE=cmadminrole
+ echo PASSWORD-REDACTED
+ kinit USERNAME-REDACTED
+ ipa user-add cmadmin-2fe305e1 --first=cmadmin-2fe305e1 --last=Admin
ipa: ERROR: Service 'HTTP@cdp-repo.jml.org' not found in Kerberos database

 

can somebody help ?

1 REPLY 1

avatar
Cloudera Employee

@fj5000 ,

 

Please provide below details for us to proceed :

 

1. CM/CDH version

2. Document you are following to implement KDC freeipa setup

3.  Refer https://www.freeipa.org/page/Troubleshooting/Kerberos and see if you can follow the suggestions coined in the doc

 

Regards,

Aditya