hadoop-mapreduce-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rakesh Radhakrishnan <rakeshr...@gmail.com>
Subject Re: Failed to start namenode.
Date Fri, 10 Jun 2016 04:51:29 GMT
Good to hear the issue is resolved and able to continue with your setup!

Best Regards,
Rakesh

On Fri, Jun 10, 2016 at 9:34 AM, Hafiz Mujadid <hafizmujadid00@gmail.com>
wrote:

> Thanks Anu and Rakesh for your response. The problem was that principal
> name was not added to database, I was trying to connect to hadoop through.
> The keytab file permissions were not enough.So by changing the permission
> and adding relative principal name solved the issue.
>
> Thanks
>
> On Thu, Jun 9, 2016 at 10:19 PM, Anu Engineer <aengineer@hortonworks.com>
> wrote:
>
>> Hi Hafiz,
>>
>>
>>
>> All suggestions from Rakesh are great ways to debug your current
>> situation. However, it is hard to answer this question without specifics of
>> the distro. The issue is that different vendors and apache seems to have
>> slightly different recommendation.
>>
>>
>>
>> If you are working with apache – here are the instructions on how to
>> setup the Kerberos
>> https://hadoop.apache.org/docs/r2.7.2/hadoop-project-dist/hadoop-common/SecureMode.html
>>
>> If you are working with Hortonworks -
>> https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.2/bk_installing_manually_book/content/ch_security_for_manual_installs_chapter.html
>>
>> If you are working with Cloudera -
>> http://www.cloudera.com/documentation/enterprise/5-5-x/topics/cdh_sg_cdh5_hadoop_security.html#topic_3
>>
>> If you are working with Ambari -
>> https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.2.0/bk_Ambari_Security_Guide/content/ch_amb_sec_guide.html
>>
>>
>>
>> It looks like you are running your Namenode without having correct
>> Kerberos configuration – it could be an issue with keytab or Kerberos
>> principal that is configured.
>>
>> I would start by running the klist command in the apache page, confirm
>> that you have right tickets, and then verify that Namenode is configured to
>> use the correct Kerberos principal.
>>
>>
>>
>> Not to scare you, but if you are completely new Kerberos and Hadoop – You
>> can read this  --
>> https://www.gitbook.com/book/steveloughran/kerberos_and_hadoop/details
>> -- Even though Steve makes is sound painful and scary -- once you set it
>> up,  you will feel that it was not that hard.
>>
>>
>>
>> If you have some background in Kerberos –understanding that Kerberos is
>> used slightly differently in Hadoop is also useful – especially if you have
>> to debug your cluster – The PDF attached to this JIRA gives you some
>> background. https://issues.apache.org/jira/browse/HADOOP-4487
>>
>>
>>
>> After the setup of your cluster, if you are still having issues with
>> other services or HDFS – This is a diagnostic tool that can help you.
>> https://github.com/steveloughran/kdiag
>>
>>
>>
>> Thanks
>>
>> Anu
>>
>>
>>
>>
>>
>> *From: *Rakesh Radhakrishnan <rakeshradr@gmail.com>
>> *Date: *Thursday, June 9, 2016 at 10:11 AM
>> *To: *Hafiz Mujadid <hafizmujadid00@gmail.com>
>> *Cc: *"user@hadoop.apache.org" <user@hadoop.apache.org>
>> *Subject: *Re: Failed to start namenode.
>>
>>
>>
>> Hi,
>>
>>
>>
>> Could you please check kerberos principal name is specified correctly in
>> "hdfs-site.xml", which is used to authenticate against Kerberos. If using
>> _HOST variable in hdfs-site.xml, ensure that hostname is getting resolved
>> and it matches with the principal name.
>>
>>
>>
>> If keytab file defined in "hdfs-site.xml" is not present you will see
>> this error. So, please verify the path and the keytab filename correctly
>> configured.
>>
>>
>>
>> Also, did you verify manual kinit using the principal name and keytab. Is
>> that working for you?
>>
>>
>>
>> Please share "hdfs-site.xml" config file to know more about your
>> configurations.
>>
>>
>>
>> Regards,
>>
>> Rakesh
>>
>>
>>
>> On Thu, Jun 9, 2016 at 6:21 PM, Hafiz Mujadid <hafizmujadid00@gmail.com>
>> wrote:
>>
>> Hi,
>>
>> I have setup kerbores with hadoop and I am facing following exception
>> when i start hadoop.
>>
>> ERROR org.apache.hadoop.hdfs.server.namenode.NameNode: Failed to start
>> namenode.
>>
>> java.io.IOException: Login failure for admin/admin@queryiorealm from
>> keytab /usr/local/var/krb5kdc/kadm5.keytab:
>> javax.security.auth.login.LoginException: Unable to obtain password from
>> user
>>
>>
>>
>>         at
>> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:962)
>>
>>         at
>> org.apache.hadoop.security.SecurityUtil.login(SecurityUtil.java:246)
>>
>>         at
>> org.apache.hadoop.hdfs.server.namenode.NameNode.loginAsNameNodeUser(NameNode.java:613)
>>
>>         at
>> org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:632)
>>
>>         at
>> org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:811)
>>
>>         at
>> org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:795)
>>
>>         at
>> org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1488)
>>
>>         at
>> org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNode.java:1554)
>>
>> Caused by: javax.security.auth.login.LoginException: Unable to obtain
>> password from user
>>
>>
>>
>> Can anybody please help me how to get rid of this issue?
>>
>>
>>
>> Thanks
>>
>>
>>
>
>
>
> --
> Regards: HAFIZ MUJADID
>

Mime
View raw message