[HADOOP-13808] replace `Can't get Master Kerberos principal` message with useful information about principal and configuration item

• Type: Sub-task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.7.3
• Component/s: security
• Target Version/s: 3.5.0
• Assignee: Unassigned
• Reporter: Steve Loughran
• Created: 11/Nov/16 11:59
• Updated: 04/Jan/24 11:59

Description

Clients get the `Can't get Master Kerberos principal` error message when their config doesn't identify the principal for a service.

This message is fairly useless as

1. it doesn't identify the service for which a principal is sought
2. it doesn't identify the configuration property looked for
3. it doesn't provide any guidance of how to fix it

As a result, anyone seeing this doesn't have a clue what to do.

I propose

1. naming the principal sought, e.g. "namenode", "YARN RM"
2. naming the configuration item looked for
3. adding a link to a wiki page covering the problem

KDiag should scan through the common set of principals if it doesn't already