Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Kerberos authentication issue

avatar
Super Collaborator

I am trying to get a ticket from Kerberos but its failing . I have created another keytab but no luck .

[root@hadoop1 scripts]# klist -kte /etc/krb5.keytab | grep hdfs
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96)
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96)
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1)
   2 07/11/17 16:46:53 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac)
[root@hadoop1 scripts]#
[root@hadoop1 scripts]# klist -kte  /etc/security/keytabs/hdfs.headless.keytab | grep hdfs
Keytab name: FILE:/etc/security/keytabs/hdfs.headless.keytab
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (arcfour-hmac)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des3-cbc-sha1)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes128-cts-hmac-sha1-96)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (aes256-cts-hmac-sha1-96)
   1 07/11/17 10:59:01 hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US (des-cbc-md5)
[root@hadoop1 scripts]#

[root@hadoop1 scripts]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US
kinit: Password incorrect while getting initial credentials
[root@hadoop1 scripts]#

[root@hadoop1 scripts]# kinit -kt /etc/krb5.keytab hdfs-fdot_hdc@TOLLS.DOT.STATE.FL.US
kinit: Password incorrect while getting initial credentials
[root@hadoop1 scripts]#

1 ACCEPTED SOLUTION

avatar
Super Collaborator

this article fixed the issue. The key version number was mismatching between the keytab and the kdc . The keytab files must have been hanging around from previous installation .

https://cwiki.apache.org/confluence/display/AMBARI/Automated+Kerberization+Troubleshooting

View solution in original post

1 REPLY 1

avatar
Super Collaborator

this article fixed the issue. The key version number was mismatching between the keytab and the kdc . The keytab files must have been hanging around from previous installation .

https://cwiki.apache.org/confluence/display/AMBARI/Automated+Kerberization+Troubleshooting