Support Questions
Find answers, ask questions, and share your expertise

YARN Containers fails with "Caused by: Client cannot authenticate via:[TOKEN, KERBEROS]" while localizing resource, on a kerberized cluster, with HA

Explorer

We are running HDP 2.5, with HDFS HA and kerberos enabled.

YARN Containers fails with "Caused by: Client cannot authenticate via:[TOKEN, KERBEROS]" while localizing resource.

If we disable HA on HDFS it works just fine. We are using an application that runs on top of YARN.

Basically, the application cannot create the KERBEROS UserGroupInformation object while localizing the resources.

Is there any known bug or recommended configuration from HDP side to make it work?