[
https://issues.apache.org/jira/browse/OOZIE-1928?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14063445#comment-14063445
]
Chernishev Aleksander commented on OOZIE-1928:
----------------------------------------------
i tried new configuration without HA, got same error
> Client mapred/_HOST@DOMAIN tries to renew a token with renewer specified as
> mapred
> ----------------------------------------------------------------------------------
>
> Key: OOZIE-1928
> URL: https://issues.apache.org/jira/browse/OOZIE-1928
> Project: Oozie
> Issue Type: Task
> Components: action
> Affects Versions: 3.3.2
> Environment: Centos6.4, cdh4.4,
> oozie-3.3.2+92-1.cdh4.4.0.p0.15.el6.noarch. hdfs + ha , mapred + ha ,
> hbase,zookeper, oozie all with krb5. two masters hdfs/mapred in ha, three
> data nodes. task runnig on the master hdfs
> Reporter: Chernishev Aleksander
>
> i'm run task in oozie (login as user kmsearch_spider, kinit like
> kmsearch_spider) , task moved to mapred(in oozie web console everything looks
> good) .When mapred trying renew token, job finished and i see in mapred
> jobtracker log:
> 2014-07-11 16:02:23,769 INFO
> org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager:
> Token renewal requested for identifier: owner=kmsearch_spider,
> renewer=mapred, realUser=oozie/[email protected], is
> sueDate=1405080142430, maxDate=1405684942430, sequenceNumber=14, masterKeyId=2
> 2014-07-11 16:02:23,769 ERROR
> org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
> as:mapred/[email protected] (auth:KERBEROS)
> cause:org.apache.hadoop.security.AccessControlException: Client mapred/pluto
> [email protected] tries to renew a token with renewer specified as
> mapred
> 2014-07-11 16:02:23,770 INFO org.apache.hadoop.ipc.Server: IPC Server handler
> 0 on 8021, call renewDelegationToken(Kind: MAPREDUCE_DELEGATION_TOKEN,
> Service: 10.241.240.57:8021, Ident: (owner=kmsearch_spider, renewer=mapred,
> realUser=oozie
> /[email protected], issueDate=1405080142430,
> maxDate=1405684942430, sequenceNumber=14, masterKeyId=2)), rpc version=2,
> client version=28, methodsFingerPrint=1830206421 from 10.241.240.57:42726:
> error: org.apache.hadoop.securit
> y.AccessControlException: Client mapred/[email protected] tries
> to renew a token with renewer specified as mapred
> org.apache.hadoop.security.AccessControlException: Client
> mapred/[email protected] tries to renew a token with renewer
> specified as mapred
> In log mapred task node:
> 2014-07-11 16:02:35,009 ERROR
> org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
> as:kmsearch_spider (auth:SIMPLE) cause:javax.security.sasl.SaslException: GSS
> initiate failed [Caused by GSSException: No valid credentials provided
> (Mechanism level: Failed to find any Kerberos tgt)]
> 2014-07-11 16:02:35,010 WARN org.apache.hadoop.ipc.SecureClient: Exception
> encountered while connecting to the server :
> javax.security.sasl.SaslException: GSS initiate failed [Caused by
> GSSException: No valid credentials provided (Mechanism level: Failed to find
> any Kerberos tgt)]
> 2014-07-11 16:02:35,011 FATAL org.apache.hadoop.ipc.SecureClient: SASL
> authentication failed. The most likely cause is missing or invalid
> credentials. Consider 'kinit'.
> javax.security.sasl.SaslException: GSS initiate failed [Caused by
> GSSException: No valid credentials provided (Mechanism level: Failed to find
> any Kerberos tgt)]
--
This message was sent by Atlassian JIRA
(v6.2#6252)
