KDC Server Connection is not available. Unable to login

[#1]

Hi all,

I have a cluster in CDP version 7.1.8 private cloud base. The Cloudera Management service show bad health and indicate that the connection to KDC server is not available.

I can regenerate missing credentials under Administration > Security > Kerberos Credentials

Moreover, I can do kinit in the CM server host. Therefore I have no idea why the connection shows failure.

Please let me know if I should provide further information. Thank you.

[#2 · Accepted solution]

I finally managed to solve the problem by switching the OpenJDK version from 8u362 to 8u232.

However, is OpenJDK 8u232 the only version that support when working on CDP 7.1.8 with Kerberos enabled?

Could someone clarify it for me please? Thank you.

[#3]

From the system log, I found error saying unsupported Keytype. I am using OpenJDK 8u332.

Do anyone know how to solve this? Thank you.

[#4 · Accepted solution]

I finally managed to solve the problem by switching the OpenJDK version from 8u362 to 8u232.

However, is OpenJDK 8u232 the only version that support when working on CDP 7.1.8 with Kerberos enabled?

Could someone clarify it for me please? Thank you.

[#5]

I am seeing the same issue and cant seem to find a way around it on Private Cloud Base 7.1.9 with AD based kerberos.
JAVA SE jdk11 and krb5.conf is set according to https://docs.cloudera.com/cdp-private-cloud-base/7.1.8/security-kerberos-authentication/topics/cm-se...

CMSERVER:<fqdn>: KDC Server Connection is not available. Unable to login.

Appreciate any help I can get to resolve this error.

Thank you!

[#6]

Can you share the exact error you notice in CM server log around the timeframe in which you notice the error 'CMSERVER:<fqdn>: KDC Server Connection is not available. Unable to login.', the full exception from cm server log will help to understand the issue better.

[#7 · Accepted solution]

@venkatsambath 
I was able to resolve the error by adding all supported kerberos Encryption Types instead of only default 'rc4-hmac'.
FYI added : rc4-hmac aes256-cts aes128-cts des-cbc-crc des-cbc-md5

[#8]

@hardik2909 If you are still experiencing the issue, can you provide the information @venkatsambath has requested? Thanks.