Security Forum

Kerberos security in HDP 2.0 GSS initiate failed

  • #48146
    Gaurav Thakur
    Participant

    GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism
    level: Fail to create credential.
    (63) – No service creds)]

    Getting the above error message after enabling security for HDP through ambari.
    MY HDFS services start and then i get this error.

    kinit is successfull for me.

    [root@kerb-ambari krb5kdc]# kinit -p dn/kerb-ambari.pbi.global.pvt@d -kt /etc/security/keytabs/dn.service.keytab
    [root@kerb-ambari krb5kdc]# hadoop fs -ls
    14/02/05 21:23:54 ERROR security.UserGroupInformation: PriviledgedActionException as:dn/kerb-ambari.pbi.global.pvt@pbi.global.pvt (auth:KERBEROS) cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) – No service creds)]
    14/02/05 21:23:54 INFO security.UserGroupInformation: Initiating logout for dn/kerb-ambari.pbi.global.pvt@pbi.global.pvt
    14/02/05 21:23:54 INFO security.UserGroupInformation: Initiating re-login for dn/kerb-ambari.pbi.global.pvt@pbi.global.pvt
    14/02/05 21:23:55 ERROR security.UserGroupInformation: PriviledgedActionException as:dn/kerb-ambari.pbi.global.pvt@pbi.global.pvt (auth:KERBEROS) cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) – No service creds)]
    14/02/05 21:23:55 WARN security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 600 seconds before.
    14/02/05 21:23:55 ERROR security.UserGroupInformation: PriviledgedActionException as:dn/kerb-ambari.pbi.global.pvt@pbi.global.pvt (auth:KERBEROS) cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) – No service creds)]
    14/02/05 21:23:57 ERROR security.UserGroupInformation: PriviledgedActionException as:dn/kerb-ambari.pbi.global.pvt@pbi.global.pvt (auth:KERBEROS) cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) – No service creds)]
    14/02/05 21:23:57 WARN security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 600 seconds before.
    14/02/05 21:23:59 ERROR security.UserGroupInformation: PriviledgedActionException as:dn/kerb-ambari.pbi.global.pvt@pbi.global.pvt (auth:KERBEROS) cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) – No service creds)]

    Any clue how to get this working?

to create new topics or reply. | New User Registration

  • Author
    Replies
  • #77009
    Sadeek Mohammad
    Participant

    hi did you find solution. i am facing same issue

You must be to reply to this topic. | Create Account

Support from the Experts

A HDP Support Subscription connects you experts with deep experience running Apache Hadoop in production, at-scale on the most demanding workloads.

Enterprise Support »

Become HDP Certified

Real world training designed by the core architects of Hadoop. Scenario-based training courses are available in-classroom or online from anywhere in the world

Training »

Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.