I looked at the other blog and compared it and found the difference. After the new operation, it can be operated HBase SQL statement fails with Insufficient permissions for user [root@m1 ~]# klist -ket /etc/security/keytabs/hbase.service.keytab Keytab name: FILE:/etc/security/keytabs/hbase.service.keytab KVNO Timestamp Principal ---- ------------------- ------------------------------------------------------ 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (des-cbc-md5) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (des3-cbc-sha1) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (arcfour-hmac) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (aes256-cts-hmac-sha1-96) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (aes128-cts-hmac-sha1-96) [root@m1 ~]# kinit -kt /etc/security/keytabs/hbase.service.keytab hbase/m1.node.hadoop@TENDATA.CN [root@m1 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: hbase/m1.node.hadoop@TENDATA.CN Valid starting Expires Service principal 09/20/2017 16:23:53 09/21/2017 16:23:53 krbtgt/TENDATA.CN@TENDATA.CN [root@m1 ~]# [root@m1 ~]# hbase shell HBase Shell; enter 'help<RETURN>' for list of supported commands. Type "exit<RETURN>" to leave the HBase Shell Version 1.1.2.2.5.3.0-37, rcb8c969d1089f1a34e9df11b6eeb96e69bcf878d, Tue Nov 29 18:48:22 UTC 2016 hbase(main):001:0> hbase(main):002:0* hbase(main):003:0* create 't1', 'f1' 0 row(s) in 2.5960 seconds => Hbase::Table - t1 hbase(main):004:0> list TABLE t1 1 row(s) in 0.0200 seconds => ["t1"] hbase(main):005:0> The key is to get the KGT without domain and result in failure kinit -kt /etc/security/keytabs/hbase.service.keytab hbase/m1.node.hadoop@TENDATA.CN ... View more

I looked at the other blog and compared it and found the difference. After the new operation, it can be operated HBase SQL statement fails with Insufficient permissions for user [root@m1 ~]# klist -ket /etc/security/keytabs/hbase.service.keytab Keytab name: FILE:/etc/security/keytabs/hbase.service.keytab KVNO Timestamp Principal ---- ------------------- ------------------------------------------------------ 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (des-cbc-md5) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (des3-cbc-sha1) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (arcfour-hmac) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (aes256-cts-hmac-sha1-96) 1 11/16/2016 13:50:24 hbase/m1.node.hadoop@TENDATA.CN (aes128-cts-hmac-sha1-96) [root@m1 ~]# kinit -kt /etc/security/keytabs/hbase.service.keytab hbase/m1.node.hadoop@TENDATA.CN [root@m1 ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: hbase/m1.node.hadoop@TENDATA.CN Valid starting Expires Service principal 09/20/2017 16:23:53 09/21/2017 16:23:53 krbtgt/TENDATA.CN@TENDATA.CN [root@m1 ~]# [root@m1 ~]# hbase shell HBase Shell; enter 'help<RETURN>' for list of supported commands. Type "exit<RETURN>" to leave the HBase Shell Version 1.1.2.2.5.3.0-37, rcb8c969d1089f1a34e9df11b6eeb96e69bcf878d, Tue Nov 29 18:48:22 UTC 2016 hbase(main):001:0> hbase(main):002:0* hbase(main):003:0* create 't1', 'f1' 0 row(s) in 2.5960 seconds => Hbase::Table - t1 hbase(main):004:0> list TABLE t1 1 row(s) in 0.0200 seconds => ["t1"] hbase(main):005:0> The key is to get the KGT without domain and result in failure kinit -kt /etc/security/keytabs/hbase.service.keytab hbase/m1.node.hadoop@TENDATA.CN ... View more

[root@m1 ~]# klist -kte /etc/security/keytabs/hbase.headless.keytab Keytab name: FILE:/etc/security/keytabs/hbase.headless.keytab KVNO Timestamp Principal ---- ------------------- ------------------------------------------------------ 1 11/16/2016 13:50:23 hbase-tdh@TENDATA.CN (des-cbc-md5) 1 11/16/2016 13:50:23 hbase-tdh@TENDATA.CN (des3-cbc-sha1) 1 11/16/2016 13:50:23 hbase-tdh@TENDATA.CN (arcfour-hmac) 1 11/16/2016 13:50:23 hbase-tdh@TENDATA.CN (aes256-cts-hmac-sha1-96) 1 11/16/2016 13:50:23 hbase-tdh@TENDATA.CN (aes128-cts-hmac-sha1-96) [root@m1 ~]# [root@m1 ~]# kinit -kt /etc/security/keytabs/hbase.headless.keytab hbase-tdh kinit: Password incorrect while getting initial credentials I did as you did, but there were mistakes. What am I supposed to do ... View more