Support Questions

Find answers, ask questions, and share your expertise

Kerberos authentication from windows machine?

avatar
Rising Star

Hello !

 

After some work I finished setting up Cloudera + MIT Kerberos + Windows AD.

 

from linux machine, I'm able to run "kinit ben@WIN-REALM" and then access hadoop or visit namenode webadmin. Of course I did configure SPNEGO on the web browser.

 

However, after logging in to my windows machine, which authenticate through windows AD, I can't access namenode webadmin which is at http://namenode:50070.

I tried running kinit from CMD but nothing changes.

this is what i get when i visit namenode webadmin.

 

HTTP ERROR 403

Problem accessing /index.html. Reason:

    GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)

 

what extra configuration do i need to do on windows to access hadoop webadmin page?

 

thank you!

Ben


Powered by Jetty://

 

1 ACCEPTED SOLUTION

avatar
Rising Star

to answer my own question

 

I need to run this on windows cmd

 

ksetup /addkdc <REALM> <KDC hostname>
ksetup /addhosttorealmmap <httpFS hostname> <REALM>

 

and set SPNEGO settings on browser

View solution in original post

11 REPLIES 11

avatar
New Contributor

Hey sparamas,

 

How did you over come the below error and successfully executed the ksetup commands:

 

Failed to create Kerberos key: 5 (0x5)
Failed to open Kerberos Key: 0x5
Failed /AddKdc : 0xc0000001

 

Thanks

avatar
Rising Star

Could you run the administrator cmd not a normal one?

From your error, I think you have not enough privilege to run these commands.