Return-Path: X-Original-To: apmail-hadoop-common-user-archive@www.apache.org Delivered-To: apmail-hadoop-common-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 2306D18405 for ; Fri, 9 Oct 2015 12:57:33 +0000 (UTC) Received: (qmail 62118 invoked by uid 500); 9 Oct 2015 12:57:27 -0000 Delivered-To: apmail-hadoop-common-user-archive@hadoop.apache.org Received: (qmail 61954 invoked by uid 500); 9 Oct 2015 12:57:27 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hadoop.apache.org Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 61609 invoked by uid 99); 9 Oct 2015 12:57:27 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Oct 2015 12:57:27 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id BC5F5180990 for ; Fri, 9 Oct 2015 12:57:26 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.449 X-Spam-Level: *** X-Spam-Status: No, score=3.449 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_REPLY=1, HTML_MESSAGE=3, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, WEIRD_PORT=0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-eu-west.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id 7rKJd_MRTztp for ; Fri, 9 Oct 2015 12:57:25 +0000 (UTC) Received: from mail-ig0-f176.google.com (mail-ig0-f176.google.com [209.85.213.176]) by mx1-eu-west.apache.org (ASF Mail Server at mx1-eu-west.apache.org) with ESMTPS id 9AF0D20DB9 for ; Fri, 9 Oct 2015 12:57:24 +0000 (UTC) Received: by igcrk20 with SMTP id rk20so34829025igc.1 for ; Fri, 09 Oct 2015 05:57:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=maR1Cvo4dGLyYzDpe76bz6d6yfCyMV+oTzOKxmCPVSY=; b=wbmhq5PNeMCeWsOw5cjJYYdhTmtKNPP7ktaLcBPSInASNmGSsftrTsxBdm8dXs5SMu 29Jx9EAH2OKixS5PmF9D73mZW+uytiZIlGcKOQMRKoCkHgP/lNsxswjmm9Ugco/MyXz4 EO2SDscv4YnteIDPkBy1kdjF+268W9I/PRDsCWpsjT6AY8msNk0cymnt4uL+XK6CdRVN zrd/voL8EViF0Sa48ZoLcJUrlvvZbFpKWi1HsHXCS5r9+E5GeJeEoBYrP/GZaLJu3z43 ouuAhaa07CKUltVIvKeOFT4ZbutPnv3pBVEf3bOXv7UE6CBuumJgYXF9p6BVBx2XKgdR Quqw== MIME-Version: 1.0 X-Received: by 10.50.83.34 with SMTP id n2mr10443503igy.21.1444395443574; Fri, 09 Oct 2015 05:57:23 -0700 (PDT) Received: by 10.107.17.105 with HTTP; Fri, 9 Oct 2015 05:57:23 -0700 (PDT) Received: by 10.107.17.105 with HTTP; Fri, 9 Oct 2015 05:57:23 -0700 (PDT) In-Reply-To: References: Date: Fri, 9 Oct 2015 07:57:23 -0500 Message-ID: Subject: RE: GSSException: Defective token detected From: Ranjith Raghunath To: user@hadoop.apache.org Content-Type: multipart/alternative; boundary=089e01294646545fc20521ab8573 --089e01294646545fc20521ab8573 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable When I have this issue in the past I had to get a new ticket using the MIT ticket manager. Can you do that and try it again? Also can you check your krb5.conf is the same as that in your cluster? On Oct 9, 2015 12:12 AM, "Jingfei Hu" wrote: > Yes. I can open http://xxxx:8088/cluster. > > > > *From:* Ranjith Raghunath [mailto:ranjith.raghunath1@gmail.com] > *Sent:* Friday, October 9, 2015 11:52 AM > *To:* user@hadoop.apache.org > *Subject:* RE: GSSException: Defective token detected > > > > Do any of the other UIs work? For example YARN application manager ui, > etc.? > > On Oct 8, 2015 10:50 PM, "Jingfei Hu" wrote: > > I am using IE to access uri > http://xxxx:50070/webhdfs/v1/?op=3DGetHomeDirectory > > > > In the domain controller host, I can access this url without any problems= . > > > > *From:* Ranjith Raghunath [mailto:ranjith.raghunath1@gmail.com] > *Sent:* Friday, October 9, 2015 11:41 AM > *To:* user@hadoop.apache.org > *Cc:* jingfei_hu@hotmail.com > *Subject:* Re: GSSException: Defective token detected > > > > Are you using Firefox or chrome? Also, what webpage are you accessing > (resource manager, namenode, etc.)? > > On Oct 8, 2015 10:20 PM, "Jingfei Hu" wrote: > > *HTTP ERROR 403* > > Problem accessing /webhdfs/v1/. Reason: > > GSSException: Defective token detected (Mechanism level: GSSHeader di= d > not find the right tag) > > > > > > *Powered by Jetty://* > > > > Anyone knows what=E2=80=99s happening here? > > > > I=E2=80=99ve setup a hdfs cluster with Kerberos authentication installed = and > configured. I can access from the DC (Domain controller) host but can=E2= =80=99t > access it from other machines. Any steps I am missing? > > > > Thanks, > > Jingfei > > --089e01294646545fc20521ab8573 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

When I have this issue in the past I had to get a new ticket= using the MIT ticket manager. Can you do that and try it again? Also can y= ou check your krb5.conf is the same as that in your cluster?

On Oct 9, 2015 12:12 AM, "Jingfei Hu" = <jingfei_hu@hotmail.com>= ; wrote:

Yes. I can open http://xxxx:8088/cluster.

=C2=A0

From: Ranjith Raghunath [mailto:ranjith.raghunath1@gmail.com]=
Sent: Friday, October 9, 2015 11:52 AM
To: user@hadoop.apache.org
Subject: RE: GSSException: Defective token detected

=C2=A0

Do any of th= e other UIs work? For example YARN application manager ui, etc.?<= /u>

On Oct 8, 2015 10:50 PM, "Jingfei H= u" <jin= gfei_hu@hotmail.com> wrote:

I am using IE to access uri http://xxxx:50070/webhdfs/v1/?op=3DGetHomeDirectory

=C2=A0

=

In the domain controller host, I can access this url without= any problems.

=C2=A0

From:<= /b> Ranjith Raghunath [mailto:ranjith.raghunath1@gmail.com]
Sent: Fr= iday, October 9, 2015 11:41 AM
To: user@hadoop.apache.org
Cc: jingfei_hu@hotmail.= com
Subject: Re: GSSException: Defective token detected

=C2=A0

Are yo= u using Firefox or chrome? Also, what webpage are you accessing (resource m= anager, namenode, etc.)?

On Oc= t 8, 2015 10:20 PM, "Jingfei Hu" <jingfei_hu@hotmail.com> wrote:

HTTP = ERROR 403

Problem accessing /webhdfs/v1/. Reason:= =C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0GSSException: Defective token detec= ted (Mechanism level: GSSHeader did not find the right tag)

=C2=A0

=C2=A0<= /u>

Powered by Jetty://<= /i>

<= p class=3D"MsoNormal">=C2=A0

Anyone= knows what=E2=80=99s happening here?

=C2=A0

I=E2=80=99ve setup a hdfs= cluster with Kerberos authentication installed and configured. I can acces= s from the DC (Domain controller) host but can=E2=80=99t access it from oth= er machines. Any steps I am missing?

=C2=A0

Thanks,

<= p class=3D"MsoNormal">Jingfei

--089e01294646545fc20521ab8573--