Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-20217

Services fail to start due to incorrect permissions on spnego.service.keytab

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Blocker
    • Resolution: Fixed
    • None
    • 2.5.0
    • None
    • None

    Description

       list_status = self.util.run_command(target, 'GETFILESTATUS', method='GET', ignore_status_codes=['404'], assertable_result=False)
        File "/usr/lib/python2.6/site-packages/resource_management/libraries/providers/hdfs_resource.py", line 199, in run_command
          raise Fail(err_msg)
      resource_management.core.exceptions.Fail: Execution of 'curl -sS -L -w '%{http_code}' -X GET --negotiate -u : '<hostname:porthere>webhdfs/v1/ats/done?op=GETFILESTATUS&user.name=hdfs'' returned status_code=403. 
      <html>
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"/>
      <title>Error 403 org.apache.hadoop.security.authentication.client.AuthenticationException: GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - RC4 with HMAC)</title>
      </head>
      <body><h2>HTTP ERROR 403</h2>
      <p>Problem accessing /webhdfs/v1/ats/done. Reason:
      <pre>    org.apache.hadoop.security.authentication.client.AuthenticationException: GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - RC4 with HMAC)</pre></p><hr /><i><small>Powered by Jetty://</small></i><br/>                                                
      <br/>     
      

      Attachments

        1. AMBARI-20217_trunk_01.patch
          1 kB
          Robert Levas
        2. AMBARI-20217_branch-2.5_01.patch
          1 kB
          Robert Levas

        Issue Links

          Activity

            People

              rlevas Robert Levas
              SunithaVelpula Sunitha
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: