Support Questions

Find answers, ask questions, and share your expertise

Kerberos Issue: Unable to Submit Topology

avatar
Expert Contributor

Running into the errors in the pictures and log file , while trying to submit a topology on a kerberised cluster. Nimbus is running on lake2.field.hortonworks.com. Can some one shed some light here, who are kerberos gurus. Appreciate any help!


screen-shot-2016-11-11-at-112952-am.png
1 ACCEPTED SOLUTION

avatar
Super Collaborator
@Geetha Anne

Is this error you get after you kinit with that principal and do run the storm command? Could you please post the storm command line?

View solution in original post

4 REPLIES 4

avatar
Super Collaborator
@Geetha Anne

Is this error you get after you kinit with that principal and do run the storm command? Could you please post the storm command line?

avatar
Expert Contributor

I didnot kinit. Now after i did that the error was gone . Thanks

avatar

@Geetha Anne

Caused by: java.security.GeneralSecurityException: Checksum failed     
      at sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451) 

Normally the above error indicates configuration related issues or the password has changed.

- What's the service principal name?

- How did you generate its keytab file?

- How did you specified the service name on the client side?

avatar
Expert Contributor

Appreciate your input . Yes the issue was the key tab and principal. Had to kinit with the specific principal instead of the default one and the error was gone.thanks