Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

hdfs services failed to start after enabling kerberos

Highlighted

hdfs services failed to start after enabling kerberos

New Contributor

Hi,

 

I enabled kerberos through cloudera manager and when I am trying to start the hdfs service, I am getting below error -

 

Failed to start namenode.
java.io.IOException: Login failure for hdfs/cloudera-manager.c.ideata-bda.internal@C.IDEATA-BDA.INTERNAL from keytab hdfs.keytab
	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:947)
	at org.apache.hadoop.security.SecurityUtil.login(SecurityUtil.java:242)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.loginAsNameNodeUser(NameNode.java:560)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:579)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:754)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:738)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1427)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNode.java:1493)
Caused by: javax.security.auth.login.LoginException: Connection refused
	at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:767)
	at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:584)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:606)
	at javax.security.auth.login.LoginContext.invoke(LoginContext.java:762)
	at javax.security.auth.login.LoginContext.access$000(LoginContext.java:203)
	at javax.security.auth.login.LoginContext$4.run(LoginContext.java:690)
	at javax.security.auth.login.LoginContext$4.run(LoginContext.java:688)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:687)
	at javax.security.auth.login.LoginContext.login(LoginContext.java:595)
	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:938)
	... 7 more
Caused by: java.net.ConnectException: Connection refused
	at java.net.PlainSocketImpl.socketConnect(Native Method)
	at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
	at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
	at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
	at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
	at java.net.Socket.connect(Socket.java:579)
	at sun.security.krb5.internal.TCPClient.<init>(NetClient.java:65)
	at sun.security.krb5.internal.NetClient.getInstance(NetClient.java:43)
	at sun.security.krb5.KdcComm$KdcCommunication.run(KdcComm.java:372)
	at sun.security.krb5.KdcComm$KdcCommunication.run(KdcComm.java:343)
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.security.krb5.KdcComm.send(KdcComm.java:327)
	at sun.security.krb5.KdcComm.send(KdcComm.java:219)
	at sun.security.krb5.KdcComm.send(KdcComm.java:191)
	at sun.security.krb5.KrbAsReqBuilder.send(KrbAsReqBuilder.java:319)
	at sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:364)
	at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:735)
	... 20 more