Support Questions

Find answers, ask questions, and share your expertise

Peer indicated failure: GSS initiate failed

avatar
Contributor

cdh5.0.2+kerberos security

hue3.5

the jobtracker log,every 5 seconds,there is a exception:

---------------------------------------------------------------------------------------------------------------------------------------------------------------

2014-06-25 18:44:45,370 ERROR org.apache.hadoop.thriftfs.SanerThreadPoolServer: Error occurred during processing of message.

java.lang.RuntimeException: com.cloudera.hue.org.apache.thrift.transport.TTransportException: Peer indicated failure: GSS initiate failed
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:219)
at org.apache.hadoop.thriftfs.HadoopThriftAuthBridge$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge.java:237)
at org.apache.hadoop.thriftfs.HadoopThriftAuthBridge$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge.java:235)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:356)
at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1528)
at org.apache.hadoop.thriftfs.HadoopThriftAuthBridge$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge.java:235)
at org.apache.hadoop.thriftfs.SanerThreadPoolServer$WorkerProcess.run(SanerThreadPoolServer.java:277)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:744)
Caused by: com.cloudera.hue.org.apache.thrift.transport.TTransportException: Peer indicated failure: GSS initiate failed
at com.cloudera.hue.org.apache.thrift.transport.TSaslTransport.receiveSaslMessage(TSaslTransport.java:190)
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport.handleSaslStartMessage(TSaslServerTransport.java:125)
at com.cloudera.hue.org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:253)
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41)
at com.cloudera.hue.org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216)
... 10 more

---------------------------------------------------------------------------------------------------------------------------------------------------------------

I confige the security with cloudera manager,and now kerberos security run normally.The test mapreduce is ok.

 

Thanks.

 

2 REPLIES 2

avatar
Mentor
Have you also added a KT_RENEWER role to Hue after enabling security, as the documentation dictates: http://www.cloudera.com/content/cloudera-content/cloudera-docs/CM4Ent/4.8.2/Configuring-Hadoop-Secur...

This would be necessary in order to allow Hue to talk to the JobTracker Thrift plugin with Kerberos+SASL, and will remove such exceptions.

avatar
New Contributor

Hi Harsh,

Should we do same for Oozie node also for KT renewal role?