Kerberos Issues
- For Kerberos issues, your
krb5.conf
andkdc.conf
files are valuable for support to be able to understand your configuration. - If you are having trouble with client access to the cluster, provide the output
for
klist -ef
after kiniting as the user account on the client host in question. Additionally, confirm that your ticket is renewable by runningkinit -R
after successfully kiniting. - Specify if you are authenticating (kiniting) with a user outside of the Hadoop cluster's realm (such as Active Directory, or another MIT Kerberos realm).
- If using AES-256 encryption, ensure you have the Unlimited Strength JCE Policy Files deployed on all cluster and client nodes.