Hi @Geoffrey Shelton Okot i created principal for my LDAP id in below fashion. kadmin.local: addprinc myid WARNING: no policy specified for id@RXPERF.HDP.XX.COM; defaulting to no policy Enter password for principal "id@RXPERF.HDP.XX.COM": Re-enter password for principal "id@RXPERF.HDP.XX.COM": Principal "id@RXPERF.HDP.XX.COM" created. i didn't created any keytab for my id as of now. Reg the sync will update that. Thanks. ... View more

Hi @Geoffrey Shelton Okot The new principal creation was successful and i can listprincs it with no issues.After enabling kerberos HA ,i had added secondary host in ambari,now every krb5.conf file is updated with two hosts like above.But the the new principal created on slave after disabling master KDC is failing with no credentials found error. thanks. ... View more

Hi @Geoffrey Shelton Okot The principal creation was successful and i added secondary host in ambari after enabling Kerberos HA,every krb5.conf file in the cluster is modified with two KDC hosts as you mentioned above.But the new principal created on slave KDC(after disabling master) is not working as expected. Thanks. ... View more

Hi @Geoffrey Shelton Okot, While testing Kerberos High Availability ,i stopped Master KDC server..and started kadmin on slave, and created a new principal (on slave).when i tried to get kerberos ticket for new principal ,it is failing with below error. Error: kinit: Client 'user@RXSKNY.HDP.XX.COM' not found in Kerberos database while getting initial credentials Any thoughts on this? Thanks. ... View more

Thank for your information @Geoffrey Shelton Okot ... View more

thank for your information @Felix Albani @vvajjala ... View more

thank @vperiasamy ... View more

thank @Ganesh S ... View more