Ambari启用Kerberos后，HDFS报Failed to find datanode, suggest to check cluster health. excludeDatanode

最新推荐文章于 2024-01-23 17:12:04 发布

源神

最新推荐文章于 2024-01-23 17:12:04 发布

阅读量3.7k

点赞数

CC 4.0 BY-SA版权

分类专栏： Kerberos

本文链接：https://blog.youkuaiyun.com/ZhouyuanLinli/article/details/81474727

本文记录了一次解决Hadoop集群中DataNode因Kerberos认证失败导致的问题，通过排查发现是票据过期引发的故障，并最终通过升级krb5-server版本解决了问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

报错日志：

2018-08-06 14:10:56,812 WARN ipc.Client (Client.java:run(711)) - Couldn't setup connection for dn/140.bd@EXAMPLE.COM to 139.bd/**.**.**.**:8020
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Ticket expired (32) - PROCESS_TGS)]
   at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211)
   at org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:413)
   at org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:595)
   at org.apache.hadoop.ipc.Client$Connection.access$2000(Client.java:397)
   at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:762)
   at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:758)
   at java.security.AccessController.doPrivileged(Nati