KrbException: Generic error (description in e-text) (60) - Unable to locate Kerberos realm

最新推荐文章于 2025-06-03 15:46:44 发布

wk022

最新推荐文章于 2025-06-03 15:46:44 发布

阅读量1.1w

点赞数

CC 4.0 BY-SA版权

本文链接：https://blog.youkuaiyun.com/wk022/article/details/50947873

本文介绍了解决在Windows环境下使用Kerberos认证访问HBase时遇到的Can't get Kerberos realm异常的方法。通过配置krb5.conf文件，并设置正确的realm和其他参数，可以有效解决此问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

最近在windows上编写访问Hbase（使用kerberos）的时候遇到了一下异常：

Exception in thread "main" java.lang.IllegalArgumentException: Can't get Kerberos realm

at org.apache.hadoop.security.HadoopKerberosName.setConfiguration(HadoopKerberosName.java:65)
at org.apache.hadoop.security.UserGroupInformation.initialize(UserGroupInformation.java:263)
at org.apache.hadoop.security.UserGroupInformation.setConfiguration(UserGroupInformation.java:299)
at gcjs.HbaseKerberos.main(HbaseKerberos.java:41)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at com.intellij.rt.execution.application.AppMain.main(AppMain.java:144)
Caused by: java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at org.apache.hadoop.security.authentication.util.KerberosUtil.getDefaultRealm(KerberosUtil.java:84)
at org.apache.hadoop.security.HadoopKerberosName.setConfiguration(HadoopKerberosName.java:63)
... 8 more
Caused by: KrbException: Cannot locate default realm
at sun.security.krb5.Config.getDefaultRealm(Config.java:1151)
... 14 more
Caused by: KrbException: Generic error (description in e-text) (60) - Unable to locate Kerberos realm
at sun.security.krb5.Config.getRealmFromDNS(Config.java:1247)
at sun.security.krb5.Config.getDefaultRealm(Config.java:1132)

... 14 more

通过分析sun.security.krb5.Config.getRealmFromDNS,并调试，发现需要进行kerberos的配置；

创建文件[javahome]/lib/security/krb5.conf，填写内容如下：

[libdefaults]
  renew_lifetime = 7d
  forwardable = true
  default_realm = EXAMPLE.COM
  ticket_lifetime = 24h
  dns_lookup_realm = false
  dns_lookup_kdc = false
  #default_tgs_enctypes = aes des3-cbc-sha1 rc4 des-cbc-md5
  #default_tkt_enctypes = aes des3-cbc-sha1 rc4 des-cbc-md5



[logging]
  default = FILE:d:/var/log/krb5kdc.log
  admin_server = FILE:d:/var/log/kadmind.log
  kdc = FILE:d:/var/log/krb5kdc.log

[realms]
  EXAMPLE.COM = {
    admin_server = test01:749
    kdc = test01:88
  }

如果windows上安装了Active Directory，也可以配置krb5.ini，目录是getWindowsDirectory(false)+krb5.ini