Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've setup Hadoop to use Kerberos (following the Cloudera security guide), but it is unclear how I connect to hadoop with regular users (e.g. username=myuser).

Currently I have myself authenticated with Kerberos with my Keberos admin user (via kinit kerbadmin/admin), but that doesn't seem to help. Do I need to tell Hadoop that kerberos user "kerbadmin" is allowed to use Hadoop?

Running something like hadoop fs -ls / results in a permission issue:

11/09/13 11:13:03 WARN ipc.Client: Exception encountered while connecting to the server : javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
Bad connection to FS. command aborted. exception: Call to <myservername>/127.0.1.1:54310 failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] 

Also, sudo -u hdfs hadoop fs -ls / returns the same error message.

share|improve this question

1 Answer 1

up vote 0 down vote accepted

Just noticed an appendix in Cloudera's setup guide that points out there is a known bug with Kerberos that is causing this, so the fix is to run kinit -R after authenticating with the server

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.