Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Kerberos ticket renewer failed to start. Below is the log file. Please help.

avatar
Explorer
Can't open /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/supervisor.conf: Permission denied.
+ make_scripts_executable
+ find /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER -regex '.*\.\(py\|sh\)$' -exec chmod u+x '{}' ';'
+ '[' kt_renewer == beeswax_server ']'
+ set_classpath_in_var HADOOP_EXTRA_CLASSPATH_STRING
+ '[' -z HADOOP_EXTRA_CLASSPATH_STRING ']'
+ [[ -n /usr/share/cmf ]]
++ find /usr/share/cmf/lib/plugins -maxdepth 1 -name '*.jar'
++ tr '\n' :
+ ADD_TO_CP=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar:
+ [[ -n '' ]]
+ eval 'OLD_VALUE=$HADOOP_EXTRA_CLASSPATH_STRING'
++ OLD_VALUE=
+ NEW_VALUE=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar:
+ export HADOOP_EXTRA_CLASSPATH_STRING=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar
+ HADOOP_EXTRA_CLASSPATH_STRING=/usr/share/cmf/lib/plugins/tt-instrumentation-5.9.0.jar:/usr/share/cmf/lib/plugins/event-publish-5.9.0-shaded.jar
+ HUE=/opt/cloudera/parcels/CDH-5.9.0-1.cdh5.9.0.p0.23/lib/hue/build/env/bin/hue
+ [[ kt_renewer == runcpserver ]]
+ [[ kt_renewer == kt_renewer ]]
+ '[' -d /usr/kerberos/bin ']'
++ which kinit
+ KINIT_PATH=/usr/bin/kinit
+ KINIT_PATH=/usr/bin/kinit
+ perl -pi -e 's#{{KINIT_PATH}}#/usr/bin/kinit#g' /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/hue.ini /var/run/cloudera-scm-agent/process/275-hue-KT_RENEWER/hue_safety_valve.ini
+ '[' dumpdata = kt_renewer ']'
+ '[' syncdb = kt_renewer ']'
+ exec /opt/cloudera/parcels/CDH-5.9.0-1.cdh5.9.0.p0.23/lib/hue/build/env/bin/hue kt_renewer
kinit: Ticket expired while renewing credentials

 

1 ACCEPTED SOLUTION

avatar
Explorer

Hi,

 

I did some workaround and found the solution: 

 

By running the following commands on the KDC will enable renewable tickets.

kadmin> modprinc -maxrenewlife 90day krbtgt/REALM.COM
kadmin> modprinc -maxrenewlife 90day +allow_renewable hue/<hostname>@REALM.COM​
 
Thanks.

View solution in original post

1 REPLY 1

avatar
Explorer

Hi,

 

I did some workaround and found the solution: 

 

By running the following commands on the KDC will enable renewable tickets.

kadmin> modprinc -maxrenewlife 90day krbtgt/REALM.COM
kadmin> modprinc -maxrenewlife 90day +allow_renewable hue/<hostname>@REALM.COM​
 
Thanks.