Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Regenerate Kerberos Keytab for a particular service?

Solved Go to solution

Regenerate Kerberos Keytab for a particular service?

Rising Star

I installed Ranger & Ambari-Infra in my cluster via Ambari but installed hung up on Setup Keytab. Although, the service installed properly but "ranger-usersync" failed due to service.keytab does not exist.

Can anyone suggest how to re-generate keytab for a particular service?

HDP - 2.5.3, Ambari - 2.4.2.0

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Regenerate Kerberos Keytab for a particular service?

Super Mentor

@Shashant Panwar

Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.

Texts from 2.5.0.3 Doc:

You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-operations/content/how_to_regenera...

.

View solution in original post

4 REPLIES 4
Highlighted

Re: Regenerate Kerberos Keytab for a particular service?

Super Mentor

@Shashant Panwar

Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.

Texts from 2.5.0.3 Doc:

You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-operations/content/how_to_regenera...

.

View solution in original post

Highlighted

Re: Regenerate Kerberos Keytab for a particular service?

Highlighted

Re: Regenerate Kerberos Keytab for a particular service?

Rising Star

Thank you @Namit Maheshwari.

Highlighted

Re: Regenerate Kerberos Keytab for a particular service?

Rising Star

Thank you guys for the prompt response.

Root cause: Somehow Kerberos admin session was expired which was not creating/setup any key tabs.

Resolution: I fixed it by restarting Ambari. After that, regeneration of ticket resolved the problem.

Don't have an account?
Coming from Hortonworks? Activate your account here