Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 01C3C200BA8 for ; Mon, 24 Oct 2016 08:51:48 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id F3FC9160AEB; Mon, 24 Oct 2016 06:51:47 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id EB9C0160AE1 for ; Mon, 24 Oct 2016 08:51:46 +0200 (CEST) Received: (qmail 99634 invoked by uid 500); 24 Oct 2016 06:51:44 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 99623 invoked by uid 99); 24 Oct 2016 06:51:44 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 24 Oct 2016 06:51:44 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 25B7EC1F63 for ; Mon, 24 Oct 2016 06:51:44 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.098 X-Spam-Level: ** X-Spam-Status: No, score=2.098 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=2, KAM_UNSUB1=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=usc-edu.20150623.gappssmtp.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id 3Pk91r17dBxV for ; Mon, 24 Oct 2016 06:51:42 +0000 (UTC) Received: from mail-pf0-f172.google.com (mail-pf0-f172.google.com [209.85.192.172]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id A09AC5FDB6 for ; Mon, 24 Oct 2016 06:51:41 +0000 (UTC) Received: by mail-pf0-f172.google.com with SMTP id 128so93332708pfz.0 for ; Sun, 23 Oct 2016 23:51:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=usc-edu.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:references:to:in-reply-to; bh=p0G+Q5oUcv+1KhC8aDAv4hW+MkBQ/BtFg+yaXPl0P2U=; b=oQ0opx8rBUzhYTUDyx/NBiSwa4RfTRRtKZgp7HHUCfcaHrh0KNJ6zYEw4bkyiZRul6 viyYhMSJViw8txBr6F2akM2PzaYo9TCeTWU61gKNVSbt2vwQkYza6TRaryoM7d8Yx0I5 u475tC5WNBLh3UuOkebbOIvZUQUXiNwvDByQ2MKYW5zCPQLCdXpURPudqx/XWQ+VNuVQ QgkGIjiizxCVfIAmvG/Zfu+vQu1CjbgAXhcmBZI5EibYJP7zX2nWNOd/yYBqdAJPz4cP 3scYorlLsNOToQMUYMmo7eFF8cUjc596FplJPbaYCiwiSJ4+nsU027eDfWJbx9997ge0 h5KQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:message-id:mime-version:subject:date :references:to:in-reply-to; bh=p0G+Q5oUcv+1KhC8aDAv4hW+MkBQ/BtFg+yaXPl0P2U=; b=EvQ1nBPqMOvATy9Xb92wGjrpdgk2cGEHvUqofBffBIcmxAt2tweUtDdi4GE0fpQkjL hliPIdtLqIbAAAj7rhB/gV87veB3RUcvF+mxaNb/EPxuKOmN0Mj2IFCoOnJ/0drQWigI Ysr2w6PQj+7RkAUgJGQBd5QsRktKzvfDkRe8yWMSze2IAkDkTA4sCCfhBxtOsQxJ5GHf SsqHaHghfJ0ilwSpqmvZcecbc54se4MGHcWqRIIJwNt90L9AJ36OX2KPqFF43UmSI5SN inj13fSLJZ+Iz8YgDMqdmEIQvcXoArt9ODtMgNIall/3Fj5REgrC2oCmxudFLU/fqQbc 7WJw== X-Gm-Message-State: ABUngvdQaf6miik/aFTadYCqdptSnUWWzBA7Yr+u10vNzgGUR7YwzRm8+mUMQR+droPpJVxq X-Received: by 10.98.74.12 with SMTP id x12mr25633822pfa.140.1477291898262; Sun, 23 Oct 2016 23:51:38 -0700 (PDT) Received: from [192.168.7.32] ([64.187.163.176]) by smtp.gmail.com with ESMTPSA id 188sm22188826pfd.9.2016.10.23.23.51.37 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 23 Oct 2016 23:51:37 -0700 (PDT) From: Chen Qiming Content-Type: multipart/alternative; boundary="Apple-Mail=_2EF4CC0C-2B4A-4BC9-A62A-2A4578CAB619" Message-Id: Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\)) Subject: Re: Encryption type AES256 CTS mode with HMAC SHA1-96 is not supported/enabled Date: Sun, 23 Oct 2016 23:51:37 -0700 References: To: user@hadoop.apache.org In-Reply-To: X-Mailer: Apple Mail (2.3112) archived-at: Mon, 24 Oct 2016 06:51:48 -0000 --Apple-Mail=_2EF4CC0C-2B4A-4BC9-A62A-2A4578CAB619 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii unsubscribe > On Oct 23, 2016, at 11:49 PM, kumar r wrote: >=20 > Hi, >=20 > I am trying to configure hadoop pseudo node secure cluster (to ensure = proper working) in Azure using Azure Domain Service.=20 >=20 > OS - Windows Server 2012 R2 Datacenter > Hadoop Version - 2.7.2 >=20 > I can able to run=20 > hadoop fs -ls / >=20 > Example MapReduce job works fine > yarn jar = %HADOOP_HOME%\share\hadoop\mapreduce\hadoop-mapreduce-examples-*.jar pi = 16 10000 >=20 > But when i run, > hdfs fsck / >=20 > it gives, >=20 > Connecting to namenode via https://node1:50470/fsck?ugi=3DKumar&path=3D%= 2F = > Exception in thread "main" java.io.IOException: = org.apache.hadoop.security.authentication.client.AuthenticationException: = Authentication failed, status: 403, message: GSSException: No valid = credentials provided (Mechanism level: Failed to find any Kerberos = credentails) > at org.apache.hadoop.hdfs.tools.DFSck.doWork(DFSck.java:335) > at = org.apache.hadoop.hdfs.tools.DFSck.access$000(DFSck.java:73) > at org.apache.hadoop.hdfs.tools.DFSck$1.run(DFSck.java:152) > at org.apache.hadoop.hdfs.tools.DFSck$1.run(DFSck.java:149) > at java.security.AccessController.doPrivileged(Native Method) > at javax.security.auth.Subject.doAs(Subject.java:415) > at = org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.= java:1657) > at org.apache.hadoop.hdfs.tools.DFSck.run(DFSck.java:148) > at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:70) > at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:84) > at org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:377) > Caused by: = org.apache.hadoop.security.authentication.client.AuthenticationException: = Authentication failed, status: 403, message: GSSException: No valid = credentials provided (Mechanism level: Failed to find any Kerberos = credentails) > at = org.apache.hadoop.security.authentication.client.AuthenticatedURL.extractT= oken(AuthenticatedURL.java:274) > at = org.apache.hadoop.security.authentication.client.PseudoAuthenticator.authe= nticate(PseudoAuthenticator.java:77) > at = org.apache.hadoop.security.authentication.client.KerberosAuthenticator.aut= henticate(KerberosAuthenticator.java:214) > at = org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConn= ection(AuthenticatedURL.java:215) > at = org.apache.hadoop.hdfs.web.URLConnectionFactory.openConnection(URLConnecti= onFactory.java:161) > at org.apache.hadoop.hdfs.tools.DFSck.doWork(DFSck.java:333) > ... 10 more >=20 >=20 > When i access namenode web ui, it shows >=20 > GSSException: Failure unspecified at GSS-API level (Mechanism level: = Encryption type AES256 CTS mode with HMAC SHA1-96 is not = supported/enabled) >=20 > >=20 > Someone help me to resolve this error and get it work successfully.=20 >=20 --Apple-Mail=_2EF4CC0C-2B4A-4BC9-A62A-2A4578CAB619 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii unsubscribe
On Oct 23, 2016, at 11:49 PM, kumar r <kumarccpp@gmail.com>= wrote:

Hi,

I am = trying to configure hadoop pseudo node secure cluster (to ensure proper = working) in Azure using Azure Domain Service.

OS - Windows Server 2012 R2 = Datacenter
Hadoop Version - 2.7.2

I can able to run
hadoop fs -ls /

Example MapReduce job works fine
yarn jar = %HADOOP_HOME%\share\hadoop\mapreduce\hadoop-mapreduce-examples-*.jar pi = 16 10000

But when i run,
hdfs fsck /

it = gives,

Connecting to namenode = via https://node1:50470/fsck?ugi=3DKumar&path=3D%2F
Exception in thread "main" java.io.IOException: = org.apache.hadoop.security.authentication.client.AuthenticationException: = Authentication failed, status: 403, message: GSSException: No valid = credentials provided (Mechanism level: Failed to find any Kerberos = credentails)
        at = org.apache.hadoop.hdfs.tools.DFSck.doWork(DFSck.java:335)
        at = org.apache.hadoop.hdfs.tools.DFSck.access$000(DFSck.java:73)
        at = org.apache.hadoop.hdfs.tools.DFSck$1.run(DFSck.java:152)
        at = org.apache.hadoop.hdfs.tools.DFSck$1.run(DFSck.java:149)
        at = java.security.AccessController.doPrivileged(Native Method)
        at = javax.security.auth.Subject.doAs(Subject.java:415)
        at = org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.= java:1657)
        at = org.apache.hadoop.hdfs.tools.DFSck.run(DFSck.java:148)
        at = org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:70)
        at = org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:84)
        at = org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:377)
Caused by: = org.apache.hadoop.security.authentication.client.AuthenticationException: = Authentication failed, status: 403, message: GSSException: No valid = credentials provided (Mechanism level: Failed to find any Kerberos = credentails)
        at = org.apache.hadoop.security.authentication.client.AuthenticatedURL.extractT= oken(AuthenticatedURL.java:274)
        at = org.apache.hadoop.security.authentication.client.PseudoAuthenticator.authe= nticate(PseudoAuthenticator.java:77)
        at = org.apache.hadoop.security.authentication.client.KerberosAuthenticator.aut= henticate(KerberosAuthenticator.java:214)
        at = org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConn= ection(AuthenticatedURL.java:215)
        at = org.apache.hadoop.hdfs.web.URLConnectionFactory.openConnection(URLConnecti= onFactory.java:161)
        at = org.apache.hadoop.hdfs.tools.DFSck.doWork(DFSck.java:333)
        ... 10 more


When i access namenode = web ui, it shows

GSSException: Failure unspecified at GSS-API level (Mechanism =
level: Encryption type AES256 CTS mode with HMAC SHA1-96 is not =
supported/enabled)

<image.png>

Someone help me to resolve this error and get it = work successfully.


= --Apple-Mail=_2EF4CC0C-2B4A-4BC9-A62A-2A4578CAB619--