Skip to main content
AMishra
AMishra
Bronze ⭐️⭐️⭐️
Nov 3, 2015 9:42 AM UTC
Solved

How to Find Missing Keytab Files in Cloudera Manager /var/run/cloudera-scm-agent/process/

Hi,

 

I have enabled kerberos in my cloudera cluster using Cloudera Manager.

Kerberized cluster is running fine. But I'm unable to get the location of keytab files (eg. hdfs.keytab, yarn.keytab etc).

The keytab location property is also missing from the *-site.xml files.

 

Where can I get the location of those keytab files.

 

Regards,

Amit

    Kartik_Agarwal
    Kartik_AgarwalAnswer
    Platinum ⭐️
    Sep 23, 2021 1:59 PM UTC

    The keytabs are pushed from a database to a runtime location at startup of services, what you are describing as a configuration is not really viable from what I understand. You will see /var/run/cloudera-scm-agent/process/ but this is ephemeral, next restart will have another locaiton. You could experiment with trying to provide the manual keytabs through safety valve to the necessary services.

    View in thread

    4 replies

    MSharma
    MSharma
    Gold ⭐️
    Mar 18, 2016 1:57 AM UTC

    keytab files are managed by cloudera manager . you can find them in /var/run/cloudera-scm-agent/process

    Translate
      obar101
      obar101
      Silver ⭐️⭐️
      Dec 25, 2019 10:22 AM UTC
      export dirname=/var/run/cloudera-scm-agent/process/
      sudo find $dirname -not -empty `-ls -l` | grep keytab
      Translate
        mugdha
        Gold ⭐️⭐️
        mugdha
        Gold ⭐️⭐️
        Mar 25, 2021 4:19 AM UTC

        They will be in the process directory for the component. For example:

         

        hive.keytab is in: 

        /var/run/cloudera-scm-agent/process/*-hive_on_tez-HIVESERVER2

         

         

        Translate
        Kartik_Agarwal
        Platinum ⭐️
        Kartik_AgarwalAnswer
        Platinum ⭐️
        Sep 23, 2021 1:59 PM UTC

        The keytabs are pushed from a database to a runtime location at startup of services, what you are describing as a configuration is not really viable from what I understand. You will see /var/run/cloudera-scm-agent/process/ but this is ephemeral, next restart will have another locaiton. You could experiment with trying to provide the manual keytabs through safety valve to the necessary services.

        Translate
          Terms & ConditionsAccessibility statement