ksetup has done and changed the below property in mozilla firefoz as per HWX docs, but still the name node UI is not opening    For FireFox: Navigate to the about:config URL (type about:config in the address box, then press the Enter key). Scroll down to network.negotiate-auth.trusted-uris and change its value to your cluster domain name (For example, .hwx.site). Change the value of network.negotiate-auth.delegation-uris to your cluster domain name (For example, .hwx.site). ... View more

ok. ksetup /addhosttorealmmap <httpFS hostname> <REALM>   httpFS hostname mean namenode host name ? ... View more

I am getting below error while doing ktsetup Failed to create Kerberos key: 5 (0x5) Failed to open Kerberos Key: 0x5 Failed /AddKdc : 0xc0000001 ... View more

the variables are configured in the /etc/krb5.conf ... View more

@Shelton After changing the realm in KDC.conf, now able to execute HDFS commands. After enabling kerberos, unable to access the any of the WEB UI like hdfs,yarn,mapreduce ... View more

@Shelton not able to execute any of the HDFS command due to kerberos.    hadoop fs -ls / 19/10/15 13:12:55 WARN ipc.Client: Exception encountered while connecting to the server : org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS] 19/10/15 13:12:55 WARN ipc.Client: Exception encountered while connecting to the server : org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS] 19/10/15 13:12:55 INFO retry.RetryInvocationHandler: java.io.IOException: DestHost:destPort hostname:8020 , LocalHost:localPort hostname/10.49.70.18:0. Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS], while invoking ClientNamenodeProtocolTranslatorPB.getFileInfo over hostname10.49.70.14:8020 after 1 failover attempts. Trying to failover after sleeping for 1171ms ... View more

@Shelton big file transfer asking mail id. can you please share it, so that i can send it    ... View more

@Shelton I am unable to add the kadmin and krbkdc logs in the bods, since it contains more lines. any idea how to attach the logs  ... View more

@Shelton yes shelton, installed all the keberos libs and packages in all the cluster hosts. After enabling kerberos, I am  trying to access hdfs from the client. But, after enabling kerberos it is not allowing me to access namenode, also namenode lost it s high availability. Attaching the Krbkdc and kadmin logs for your reference. Kindly do the needful. ... View more