Hi, I enabled the kereberos in my ambari standalone server for some testing. After seeting my own KDC in the same server and validations from Ambari UI it was kerberized successfully. Added the keytab for shell and now able to access the hdfs in terminal but no matter what I try the webhdfs is not working and throwing defective token deducted errors. HDP version: Version 22.214.171.124 Below error in browser: Browse Directory × Permission denied when trying to open /webhdfs/v1/?op=LISTSTATUS: org.apache.hadoop.security.authentication.client.AuthenticationException: GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)
This is because when you try to access using the browser there is no ticket.
You have to use Knox service to access to WEBHDFS service, and after set the credentials on the browser Knox will request a ticket for you.