Created on 05-08-2018 02:36 PM - edited 09-16-2022 06:12 AM
On Sandbox 2.6.4 I am trying to enable kerberos with existing MS AD 2012R2. I hardly managed to enable it with minor issues and warnings.
java.io.IOException: Could not configure server because SASL configuration did not allow the ZooKeeper server to authenticate itself properly: javax.security.auth.login.LoginException: Clock skew too great (37)
Following this I synced Sandbox and Server 2012R2. The tried again. But Zookeeper doesn't start with the same error.
Created 05-08-2018 03:09 PM
You issue looks the NTPD service ie The clock on you system (Linux/UNIX) is too far off from the correct time or not in sync wit the AD 2012R".
Your machine needs to be within less than 5 minutes of the Kerberos servers in order to get any tickets.
Created 05-09-2018 06:47 AM
Thank you @Geoffrey Shelton Okot for your quick answer. You are right there was huge difference between LDAP server and Sandbox. I am aware of that. But I have fixed it and retried but the result is the same.
[root@sandbox-hdp ~]# service ntpd status ntpd (pid 29267) is running... [root@sandbox-hdp ~]# date Wed May 9 09:44:22 +03 2018
Created 05-09-2018 06:59 AM
Can you repost the latest error ! And how I can reproduce it
Created 05-10-2018 08:32 AM
Traceback (most recent call last): File "/var/lib/ambari-agent/cache/common-services/ZOOKEEPER/3.4.5/package/scripts/zookeeper_server.py", line 134, in <module> ZookeeperServer().execute() File "/usr/lib/python2.6/site-packages/resource_management/libraries/script/script.py", line 375, in execute method(env) File "/usr/lib/python2.6/site-packages/resource_management/libraries/script/script.py", line 978, in restart self.start(env, upgrade_type=upgrade_type) File "/var/lib/ambari-agent/cache/common-services/ZOOKEEPER/3.4.5/package/scripts/zookeeper_server.py", line 56, in start zookeeper_service(action='start', upgrade_type=upgrade_type) File "/usr/lib/python2.6/site-packages/ambari_commons/os_family_impl.py", line 89, in thunk return fn(*args, **kwargs) File "/var/lib/ambari-agent/cache/common-services/ZOOKEEPER/3.4.5/package/scripts/zookeeper_service.py", line 51, in zookeeper_service user=params.smokeuser File "/usr/lib/python2.6/site-packages/resource_management/core/base.py", line 166, in __init__ self.env.run() File "/usr/lib/python2.6/site-packages/resource_management/core/environment.py", line 160, in run self.run_action(resource, action) File "/usr/lib/python2.6/site-packages/resource_management/core/environment.py", line 124, in run_action provider_action() File "/usr/lib/python2.6/site-packages/resource_management/core/providers/system.py", line 262, in action_run tries=self.resource.tries, try_sleep=self.resource.try_sleep) File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 72, in inner result = function(command, **kwargs) File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 102, in checked_call tries=tries, try_sleep=try_sleep, timeout_kill_strategy=timeout_kill_strategy) File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 150, in _call_wrapper result = _call(command, **kwargs_copy) File "/usr/lib/python2.6/site-packages/resource_management/core/shell.py", line 303, in _call raise ExecutionFailed(err_msg, code, out, err) resource_management.core.exceptions.ExecutionFailed: Execution of '/usr/bin/kinit -kt /etc/security/keytabs/smokeuser.headless.keytab ambari-qa-sandbox@HADOOP.COM;' returned 1. kinit: Clock skew too great while getting initial credentials
On Virtulabox+Sandbox 2.6.4
Enable kerberos
Ambari force you to stop all services
When starting all services Zookeeper gives error shown above.
Thank you @Geoffrey Shelton Okot good luck.
Created 05-10-2018 11:56 AM
Seeing your error above "kinit: Clock skew too great while getting initial credentials"
Correct me if I am wrong I see on your sandbox date output translates to date 09/05/2018 and time 09:44
# date Wed May 9 09:44:22 +03 2018
But on the screenshot of your Windows time attached translates to date 02/05/2018 and the time 09:44 that's is 7 days difference
Please set your Windows 2012R2's date to the same date like the Sandbox its should work!!
Please let me know