Home | About | Sematext search-lucene.com search-hadoop.com
 Search Hadoop and all its subprojects:

Switch to Plain View
Hadoop, mail # user - Kerboes--Checksum failed----HDFS IN HA mode


Copy link to this message
-
Kerboes--Checksum failed----HDFS IN HA mode
Brahma Reddy Battula 2013-05-08, 04:43
HI to all,

Please help me for following issue....

 I Started the cluster in HA mode by configuring the kerboes..

ENV details:

======
**.200.68----KDC Machine

**.195.165-- NN1(Active),DN1

***195.178-- NN2(StandBy),DN2

Created the principles and keytab for the both nodes like following

jack/linux165

jack/linux178

HTTP/linux165

HTTP/linux178

and I created the keytab hdfs.keytab and copied to the both the machines.and I did kinit..

I am getting the following execption in both nodes.krb5.conf and kdc.conf are same across the cluster..

2013-05-07 21:30:47,983 WARN SecurityLogger.org.apache.hadoop.ipc.Server: Auth failed for 10.71.195.178:11329:null
2013-05-07 21:30:47,984 INFO org.apache.hadoop.ipc.Server: IPC Server listener on 8020: readAndProcess threw exception javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)] from client 10.71.195.178. Count of bytes read: 0
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)]
        at com.sun.security.sasl.gsskerb.GssKrb5Server.evaluateResponse(GssKrb5Server.java:159)
        at org.apache.hadoop.ipc.Server$Connection.saslReadAndProcess(Server.java:1203)
        at org.apache.hadoop.ipc.Server$Connection.readAndProcess(Server.java:1411)
        at org.apache.hadoop.ipc.Server$Listener.doRead(Server.java:712)
        at org.apache.hadoop.ipc.Server$Listener$Reader.doRunLoop(Server.java:511)
        at org.apache.hadoop.ipc.Server$Listener$Reader.run(Server.java:486)
Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)
        at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:741)
        at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:323)
        at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:267)
        at com.sun.security.sasl.gsskerb.GssKrb5Server.evaluateResponse(GssKrb5Server.java:137)
        ... 5 more
Caused by: KrbException: Checksum failed
        at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:85)
        at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:77)
        at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:168)
        at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:268)
        at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:134)
        at sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:79)
        at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:724)
        ... 8 more
Caused by: java.security.GeneralSecurityException: Checksum failed
        at sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:431)
        at sun.security.krb5.internal.crypto.dk.AesDkCrypto.decrypt(AesDkCrypto.java:254)
        at sun.security.krb5.internal.crypto.Aes256.decrypt(Aes256.java:59)
        at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:83)
        ... 14 more

+
Subroto 2013-05-08, 07:30
+
Brahma Reddy Battula 2013-05-10, 03:01