@Ankita Ghate Your situation is bizarre! Can you share the screenshot of the kerberization steps? Apart from the above can you share a tokenized version of your the below files krb5.conf kdc.conf kadm5.acl /etc/hosts share the output of $ hostname -f on the kdc server Then if the above files are correct Reset the password through kadmin # kadmin.local Authenticating as principal admin/admin@EXAMPLE.COM with password. kadmin.local: change_password -pw secret123 admin@EXAMPLE.COM Password for "admin@EXAMPLE.COM" changed. kadmin.local: q In the above sequence, I have invoked kadmin as root user and change the previous password to secret123. To ensure all is okay restart the kdc and kadmin # /etc/rc.d/init.d/krb5kdc start Starting Kerberos 5 KDC: [ OK ] # /etc/rc.d/init.d/kadmin start Starting Kerberos 5 Admin Server: [ OK ] Now you can run the Kerberos tool again to regenerate the keytabs and all the services should restart successfully ... View more

@harsha vardhan bandaru Can you accept the answer to close this long overdue thread. ... View more

@Abhinav Joshi The handshake problem could be related to SSL or both, can you attach the error stack and the logs? ... View more

@Vinu Nice to know the explanation helped. but also the best way to master is trying it out. Please could you take some time an"Accept " my response so other HCC member could easily reference it ... View more

@Jay Kumar SenSharma Is there an explanation as to why a user can fail to accept an answer because the option is "grayed out"? In this thread, a user wanted to accept my response but somehow he is unable 🙂 Can you help !!! ... View more

@Alex Goron Here you go ... View more

@hardik desai Any updates? If my response answered your question then can you take time and "accept" it so others HCC members could reference it ... View more

@Alex Goron Great then if that answered your question then can you take some time and "Accept" so that other members can reference it. ... View more

@Alex Goron Unfortunately, Ambari also doesn't push the krb5.conf, you need the install the Kerberos client on all the client nodes this will deliver the krb5.conf which you will need to modify using the correct REALM name and KDC hostname Server install yum install krb5-server krb5-libs krb5-workstation KDC server package: krb5-server Admin package: krb5-libs Client install yum install krb5-workstation Client package: krb5-workstation Configuration Files: /var/kerberos/krb5kdc/kdc.conf {Present ONLY on server} /var/kerberos/krb5kdc/kadm5.acl {Present ONLY on server} /etc/krb5.conf {Present both server/client} After editing the above files then you can run the Ambari Kerberos tool it should run successfully ... View more

@hardik desai When you run the shutdown command the balancer kicks off, it takes up network resources. You want to make sure you are not doing it when you have heavy load as those jobs will be affected. There are also checks against moving blocks as you may have current jobs using them. Decommissioning is a more elegant way of triggering rebalancing and zero data block loss your undesired node will be decommissioned once all the blocks have been replicated. This is the more used option. ... View more