distcp Job fails with delegation token renewal type: kms-dt

[#1]

Version: HDP 2.6.5

Error while running DistCP job. Both clusters are Secure. Same Realm.

Error: Failed to renew token: Kind: kms-dt, Service: KMS-SERVER:PORT ()

Already tried setting mapreduce.job.hdfs-servers.token-renewal.exclude= target cluster

and also the specific KMS host name.

[#2]

@Sundara Palanki

Please can you check below article, seems you are facing similar issue.
https://community.hortonworks.com/content/supportkb/150691/yarn-failed-to-renew-token-kind-timeline-...

[#3]

Hello Jagadeesan,

The cluster are not multi homed the TIME Line server is providing the required DT . The issue is specific to kms delegation token. Can you please confirm if this is a known issue. I have verified the below as well.

https://community.hortonworks.com/content/supportkb/154246/error-orgapachehadoopyarnexceptionsyarnex...

[#4]

As mentioned in the article, did you modified KMS URL in Ambari and removed tailing "/' ? which resolved your issue or still facing same..?

[#5]

Error stack contains: HTTP Status 403, Message: Forbidden no much details further.

[#6]

Please can you attach full error logs to debug further, if issue persist..