and additionally , what does this kvno command do? when i kinit relavant keytab for impala_test/<host fqdn>@domain. it works fine. but kvno command does not. ... View more

@araujo  OMG!! kinit <user> - works fine kvno impala/<host fqdn> - works fine but, kvno impala_test/<host fqdn> - not working !!! kvno: Server not found in Kerberos database while getting credentials for impala_test/<host fqdn>@domain  ... View more

@araujo / @ram76  should the backend host fqdn be accessible from the KDC server. I am using a custom fqdn for hosts which are accessible within the cluster but KDC can access only the LB fqdn.is this an issue? any comments? ... View more

Hi Ram, kinit works fine in both of the servers as expected and no difference in krb5.conf files as well. Thanks, Panduka. ... View more

Hi, everything works fine for "impala" service name. but I will try and let you know. Thank you very much. Thanks, Panduka. ... View more

Hi André, Please find the in line comments, What's your Kerberos KDC? (AD, MIT, FreeIPA, or other) [AWS Managed AD] When you changed the Impala principal name, did you create the new principal in Kerberos? You need to make sure that all the principals "impala_test/<host>" exist in the KDC for all the hosts. [yes i created principals with customized service name] Did you regenerate the keytabs for all the Impala Daemons, Catalog and State Store with the new principal name? [yes] Thanks, Panduka. ... View more

We do not use Cloudera Manager to manage our impala cluster. It is a proprietary system. So I have limitations on sharing content here. Im sorry. We use start-up configs to start impala daemons to acquire expected behaviour . Thanks, Panduka ... View more

@araujo  i do not know where else to configure this customized service name for impala services. ... View more

yes, initially i used a default service name as "impala".but later for a requirement i needed to use customize the service name part in principal as "impala_test".  additionally, i tried including this customized service name in internal_principals_whitelist parameter as well but no good. 😥 @araujo thank you very much for replying. kudos ... View more

@araujo yes im using a load balancer as well ... View more