Support Questions

Find answers, ask questions, and share your expertise
Announcements
Now Live: Explore expert insights and technical deep dives on the new Cloudera Community BlogsRead the Announcement

Kerberos ticket renewer failed to start. Below is the log file. Please help.

avatar
Explorer
Can't open /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/supervisor.conf: Permission denied.
+ make_scripts_executable
+ find /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER -regex '.*\.\(py\|sh\)$' -exec chmod u+x '{}' ';'
+ '[' kt_renewer == beeswax_server ']'
+ set_classpath_in_var HADOOP_EXTRA_CLASSPATH_STRING
+ '[' -z HADOOP_EXTRA_CLASSPATH_STRING ']'
+ [[ -n /usr/share/cmf ]]
++ find /usr/share/cmf/lib/plugins -maxdepth 1 -name '*.jar'
++ tr '\n' :
+ ADD_TO_CP=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar:
+ [[ -n '' ]]
+ eval 'OLD_VALUE=$HADOOP_EXTRA_CLASSPATH_STRING'
++ OLD_VALUE=
+ NEW_VALUE=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar:
+ export HADOOP_EXTRA_CLASSPATH_STRING=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar
+ HADOOP_EXTRA_CLASSPATH_STRING=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar
+ HUE=/opt/cloudera/parcels/CDH-5.9.0-1.cdh5.9.0.p0.23/lib/hue/build/env/bin/hue
+ [[ kt_renewer == runcpserver ]]
+ [[ kt_renewer == kt_renewer ]]
+ '[' -d /usr/kerberos/bin ']'
++ which kinit
+ KINIT_PATH=/usr/bin/kinit
+ KINIT_PATH=/usr/bin/kinit
+ perl -pi -e 's#{{KINIT_PATH}}#/usr/bin/kinit#g' /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/hue.ini /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/hue_safety_valve.ini
+ '[' dumpdata = kt_renewer ']'
+ '[' syncdb = kt_renewer ']'
+ exec /opt/cloudera/parcels/CDH-5.9.0-1.cdh5.9.0.p0.23/lib/hue/build/env/bin/hue kt_renewer
kinit: Ticket expired while renewing credentials

 

1 ACCEPTED SOLUTION

avatar
Explorer

Hi,

 

I did some workaround and found the solution: 

 

By running the following commands on the KDC will enable renewable tickets.

kadmin> modprinc -maxrenewlife 90day krbtgt/REALM.COM
kadmin> modprinc -maxrenewlife 90day +allow_renewable hue/<hostname>@REALM.COM​
 
Thanks.

View solution in original post

1 REPLY 1

avatar
Explorer

Hi,

 

I did some workaround and found the solution: 

 

By running the following commands on the KDC will enable renewable tickets.

kadmin> modprinc -maxrenewlife 90day krbtgt/REALM.COM
kadmin> modprinc -maxrenewlife 90day +allow_renewable hue/<hostname>@REALM.COM​
 
Thanks.