hadoop-mapreduce-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Micro dong <microle.d...@gmail.com>
Subject Start job with Kerberos meet error
Date Tue, 01 Nov 2016 03:45:13 GMT
I'm trying to configure Yarn(hadoop-2.7.2)  With Kerberos。Here is my
 configuration file in yarn-site.xml。
    *<property>*
*      <name>yarn.resourcemanager.keytab</name>*
*
 <value>/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab</value>*
*    </property>*
*    <property>*
*      <name>yarn.resourcemanager.principal</name>*
*      <value>yarn/_HOST@HADOOP.COM <HOST@HADOOP.COM></value>*
*    </property>*
*    <property>*
*      <name>yarn.nodemanager.keytab</name>*
*
<value>/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab</value>*
*    </property>*
*    <property>*
*      <name>yarn.nodemanager.principal</name>*
*      <value>yarn/_HOST@HADOOP.COM <HOST@HADOOP.COM></value>*
*    </property>*
*    <property>*
*      <name>yarn.nodemanager.linux-container-executor.path</name>*
*      <value>/home/yarn/software/hadoop/bin/container-executor</value>*
*    </property>*
*    <property>*
*      <name>yarn.nodemanager.container-executor.class</name>*
*
<value>org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor</value>*
*    </property>*
*    <property>*
*      <name>yarn.nodemanager.linux-container-executor.group</name>*
*      <value>yarn</value>*
*    </property>*

the keytab file is in its location, its owner is yarn. But when I try to
start job, I see this message on the log:
2016-10-31 19:30:00,743 WARN org.apache.hadoop.yarn.server.
nodemanager.containermanager.localizer.ResourceLocalizationService: {
hdfs://tempt48:9000/home/yarn/staging/xjc/.staging/job_1477641527809_0017/job.jar,
1477913393217, PATTERN, (?:classes/|lib/).* } failed: Login failure for
yarn/tempt57@HADOOP.COM from keytab
/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab:
javax.security.auth.login.LoginException: Unable to obtain password from
user

tempt48 is resourcemanager'node ,tempt57 is nodemanager's node.

keytab file in tempt57
*[yarn@tempt57 sbin]$ klist -kt
/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab *
*Keytab name: FILE:/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab*
*KVNO Timestamp         Principal*
*---- -----------------
--------------------------------------------------------*
*   2 10/31/16 17:30:06 yarn/tempt57@HADOOP.COM <tempt57@HADOOP.COM>*
*   2 10/31/16 17:30:06 yarn/tempt57@HADOOP.COM <tempt57@HADOOP.COM>*
*   2 10/31/16 17:30:07 yarn/tempt57@HADOOP.COM <tempt57@HADOOP.COM>*
*   2 10/31/16 17:30:07 yarn/tempt57@HADOOP.COM <tempt57@HADOOP.COM>*
*   2 10/31/16 17:30:07 yarn/tempt57@HADOOP.COM <tempt57@HADOOP.COM>*


keytab file in tempt48
*[yarn@tempt48 sbin]$ klist  -kt
/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab*
*Keytab name: FILE:/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab*
*KVNO Timestamp         Principal*
*---- -----------------
--------------------------------------------------------*
*   2 10/14/16 12:00:18 yarn/tempt48@HADOOP.COM <tempt48@HADOOP.COM>*
*   2 10/14/16 12:00:18 yarn/tempt48@HADOOP.COM <tempt48@HADOOP.COM>*
*   2 10/14/16 12:00:18 yarn/tempt48@HADOOP.COM <tempt48@HADOOP.COM>*
*   2 10/14/16 12:00:19 yarn/tempt48@HADOOP.COM <tempt48@HADOOP.COM>*
*   2 10/14/16 12:00:19 yarn/tempt48@HADOOP.COM <tempt48@HADOOP.COM>*


 Any help would be highly appreciated.

*Best regards*

Mime
View raw message