Workflow Failed in SSH Action with error GSS initiate failed

[#1]

Hello team,

my workflow has been failing for several days in SSH actions randomly.
the error found in the SSH logs is:

Causé par : GSSException : aucune information d'identification valide fournie (niveau de mécanisme : TGT a été révoqué (20))
sur sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:772)
sur sun.security.jgss.GSSContextImpl.initSecContext (GSSContextImpl.java:248)
sur sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
sur com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192)
... 45 plus
Causé par : KrbException : TGT a été révoqué (20)
sur sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
sur sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:226)
sur sun .security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:237)
à sun.security.krb5.internal.CredentialsUtil.serviceCredsSingle(CredentialsUtil.java:482)
à sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:340)
à sun.security.krb5.internal.CredentialsUtil.serviceCreds (CredentialsUtil.java:314)
sur sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:169)
sur sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:490)
sur sun.security.jgss. krb5.Krb5Context.initSecContext(Krb5Context.java:695)
... 48 de plus
Causé par : KrbException : l'identifiant ne correspond pas à la valeur attendue (906)

I'm really lost, I don't know exactly where the problem comes from.

if anyone can help me i will be grateful

[#2]

Hi,

This is very strange, but we had a similar problem two days ago.
Some queries in impala started to fall with an Kerberos error:

Couldn't setup connection for impala/impalad-hostname@domain.com to NN-hostname/NN-ip:8020
Caused by: KrbException: TGT has been revoked (20)
at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
…
... 37 more
Caused by: KrbException: Identifier doesn't match expected value (906)

We noticed such errors only in Impalad and Impala Catalogd services.
Other services like HDFS works fine.

We suspect that the causes of the problem (TGT has been revoked) are in Windows domain.

[#3 · Accepted solution]

The problem was resolved after uninstalling the Windows update KB5018411 on domain controllers.

[#4]

Thank You SergeyP