I'm using HDP 2.4. After I'm enabling kerberos, FileView tab shows error msg as "500 HdfsApi connection failed. Check "webhdfs.url" property" After i have been successfully configured and FileView tab as
auth=KERBEROS;proxyuser=ambari-server@NIMBUS.COM. All hdfs services successfully started. Please find my attachment log of webhdfs. webhdfs-log.txt
please tell me how to resolve this problem?
The error that you posted in the attached file indicates that you have not added a correct format "proxyuser" principal.
Example: (Incorrect with default auth rules) check the "hadoop.security.auth_to_local" rules patterns.
Example: (correct with default auth riles)
auth=KERBEROS;proxyuser=ambari-server OR auth=KERBEROS;proxyuser=ambari-server@EXAMPLE.COM.
In my another cluster i have rules slightly different.
Your proxyuser principal name should match the rules defined in "Advanced core-site" -> "hadoop.security.auth_to_local" property.
Also can you please check what principal do you see when you run the command
# klist -kte /etc/security/keytabs/ambari.server.keytab