Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

hbase SPN contains ip-address instead of hostname. Authentication error.

Highlighted

hbase SPN contains ip-address instead of hostname. Authentication error.

New Contributor

Hi,

hbase service principal name resolves as hbase/ip-address@REALM.COM. But when we look at the list of principals in KDC, it lists the same SPN with hostname as expected hbase/hostname@REALM.COM. We do have skydns entries of datalake nodes added in etcd so the datalake nodes resolves with the hostnames. But still we're not able to figure this out. 

While we try to authenticate to the SPN from local, it works fine. But only in a kubernetes cluster it uses the ip-address in SPN and fails since it couldn't one SPN in KDC. What could be the reason for this?

Don't have an account?
Coming from Hortonworks? Activate your account here