Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Unable to upload new files to encrypted zone in HDFS

Solved Go to solution
Highlighted

Re: Unable to upload new files to encrypted zone in HDFS

New Contributor

FWIW I seem to have found a solution.

 

I had added  a call to 

ugi.checkTGTAndReloginFromKeytab()

but it hadn't worked.

 

Later in debugging I found that that call was trying to renew the Proxy User, not the underlying principal.

 

I changed the call so that it would get the principal's ugi and call the same method on that and now it seems to work.

 

There are still outstanding questions, though, if anyone cares to investigate further:

 

  • Why was this only necessary for D.A.R.E. ?  All other ops (hdfs, Hive, yarn, etc.) continued working and renewing krbtgt's perpetually
  • Was the upgrade of CDH needed or would it have continued working with the older version?
Don't have an account?
Coming from Hortonworks? Activate your account here