Support Questions

Find answers, ask questions, and share your expertise

Regenerate Kerberos Keytab for a particular service?

avatar
Rising Star

I installed Ranger & Ambari-Infra in my cluster via Ambari but installed hung up on Setup Keytab. Although, the service installed properly but "ranger-usersync" failed due to service.keytab does not exist.

Can anyone suggest how to re-generate keytab for a particular service?

HDP - 2.5.3, Ambari - 2.4.2.0

1 ACCEPTED SOLUTION

avatar
Master Mentor

@Shashant Panwar

Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.

Texts from 2.5.0.3 Doc:

You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-operations/content/how_to_regenera...

.

View solution in original post

4 REPLIES 4

avatar
Master Mentor

@Shashant Panwar

Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.

Texts from 2.5.0.3 Doc:

You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.5.0.3/bk_ambari-operations/content/how_to_regenera...

.

avatar

avatar
Rising Star

Thank you @Namit Maheshwari.

avatar
Rising Star

Thank you guys for the prompt response.

Root cause: Somehow Kerberos admin session was expired which was not creating/setup any key tabs.

Resolution: I fixed it by restarting Ambari. After that, regeneration of ticket resolved the problem.