Support Questions

Find answers, ask questions, and share your expertise

Kerberos ticket renewer failed to start. Below is the log file. Please help.

avatar
Explorer
Can't open /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/supervisor.conf: Permission denied.
+ make_scripts_executable
+ find /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER -regex '.*\.\(py\|sh\)$' -exec chmod u+x '{}' ';'
+ '[' kt_renewer == beeswax_server ']'
+ set_classpath_in_var HADOOP_EXTRA_CLASSPATH_STRING
+ '[' -z HADOOP_EXTRA_CLASSPATH_STRING ']'
+ [[ -n /usr/share/cmf ]]
++ find /usr/share/cmf/lib/plugins -maxdepth 1 -name '*.jar'
++ tr '\n' :
+ ADD_TO_CP=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar:
+ [[ -n '' ]]
+ eval 'OLD_VALUE=$HADOOP_EXTRA_CLASSPATH_STRING'
++ OLD_VALUE=
+ NEW_VALUE=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar:
+ export HADOOP_EXTRA_CLASSPATH_STRING=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar
+ HADOOP_EXTRA_CLASSPATH_STRING=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar
+ HUE=/opt/cloudera/parcels/CDH-5.9.0-1.cdh5.9.0.p0.23/lib/hue/build/env/bin/hue
+ [[ kt_renewer == runcpserver ]]
+ [[ kt_renewer == kt_renewer ]]
+ '[' -d /usr/kerberos/bin ']'
++ which kinit
+ KINIT_PATH=/usr/bin/kinit
+ KINIT_PATH=/usr/bin/kinit
+ perl -pi -e 's#{{KINIT_PATH}}#/usr/bin/kinit#g' /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/hue.ini /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/hue_safety_valve.ini
+ '[' dumpdata = kt_renewer ']'
+ '[' syncdb = kt_renewer ']'
+ exec /opt/cloudera/parcels/CDH-5.9.0-1.cdh5.9.0.p0.23/lib/hue/build/env/bin/hue kt_renewer
kinit: Ticket expired while renewing credentials

 

1 ACCEPTED SOLUTION

avatar
Explorer

Hi,

 

I did some workaround and found the solution: 

 

By running the following commands on the KDC will enable renewable tickets.

kadmin> modprinc -maxrenewlife 90day krbtgt/REALM.COM
kadmin> modprinc -maxrenewlife 90day +allow_renewable hue/<hostname>@REALM.COM​
 
Thanks.

View solution in original post

1 REPLY 1

avatar
Explorer

Hi,

 

I did some workaround and found the solution: 

 

By running the following commands on the KDC will enable renewable tickets.

kadmin> modprinc -maxrenewlife 90day krbtgt/REALM.COM
kadmin> modprinc -maxrenewlife 90day +allow_renewable hue/<hostname>@REALM.COM​
 
Thanks.