- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Regenerate Kerberos Keytab for a particular service?
- Labels:
-
Apache Ranger
Created ‎04-06-2017 05:25 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I installed Ranger & Ambari-Infra in my cluster via Ambari but installed hung up on Setup Keytab. Although, the service installed properly but "ranger-usersync" failed due to service.keytab does not exist.
Can anyone suggest how to re-generate keytab for a particular service?
HDP - 2.5.3, Ambari - 2.4.2.0
Created ‎04-06-2017 05:36 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.
Texts from 2.5.0.3 Doc:
You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.
.
Created ‎04-06-2017 05:36 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Even with newer Ambari 2.5.0.3 you can regenerate the keytab for whole cluster services/ Or for selected hosts that are missing keytabs.
Texts from 2.5.0.3 Doc:
You can regenerate key tabs for only those hosts that are missing key tabs: for example, hosts that were not online or available from Ambari when enabling Kerberos.
.
Created ‎04-06-2017 05:48 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please see below guide for Ambari 2.4.2.0:
Created ‎04-06-2017 06:53 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you @Namit Maheshwari.
Created ‎04-06-2017 06:53 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you guys for the prompt response.
Root cause: Somehow Kerberos admin session was expired which was not creating/setup any key tabs.
Resolution: I fixed it by restarting Ambari. After that, regeneration of ticket resolved the problem.
