Support Questions

Find answers, ask questions, and share your expertise

password incorrect

avatar
Contributor

After I "Enable Kerberos" I execute kinit, it reminds me to input password. But i do not set password for it.

1 ACCEPTED SOLUTION

avatar
Master Mentor

@Zhao Chaofeng

Are you passing the keytab path to it?

Example:

Syntax:
kinit -kt  /PATH/TO/Keytab_file  $PRINCIPAL_NAME

Example:
kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-ClusterDemo@EXAMPLE.COM

.

View solution in original post

5 REPLIES 5

avatar
Master Mentor

@Zhao Chaofeng

Are you passing the keytab path to it?

Example:

Syntax:
kinit -kt  /PATH/TO/Keytab_file  $PRINCIPAL_NAME

Example:
kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-ClusterDemo@EXAMPLE.COM

.

avatar
Contributor

Yes, I kinit -kt first, and then execute kadmin.local.

avatar
Contributor
My operation is:
[root@bigdata013 centos]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-bigdata@ISTUARY.COM
[root@bigdata013 centos]# kinit hdfs-bigdata@ISTUARY.COM
Password for hdfs-bigdata@ISTUARY.COM: 
kinit: Password incorrect while getting initial credentials

avatar
Master Mentor

@Zhao Chaofeng

Looks like your kinit was successful earlier when you run the command as it did not show any error. So i think the ticket was generated fine.

[root@bigdata013 centos]# kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-bigdata@ISTUARY.COM

After running the above command did you check the output of "klist" command to see if you got the kerberos ticket?

[root@bigdata013 centos]# klist

.

Example at my end:

# kinit  -kt  /etc/security/keytabs/hdfs.headless.keytab  hdfs-JoyCluster@EXAMPLE.COM 

# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: hdfs-JoyCluster@EXAMPLE.COM

Valid starting     Expires            Service principal
01/23/17 10:00:20  01/23/17 10:00:50  krbtgt/EXAMPLE.COM@EXAMPLE.COM
    renew until 01/23/17 10:00:20

.

avatar
Contributor

Yes, I run the command success before, but it is not right when I run the command after I install LDAP.

Thank you, I will retry a minute.