[
https://issues.apache.org/jira/browse/AMBARI-24874?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rajkumar Singh updated AMBARI-24874:
------------------------------------
Description:
{code}
Exception in thread "main" java.lang.RuntimeException:
java.lang.RuntimeException: The TGT found is not renewable
at
org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:104)
at
org.apache.storm.StormSubmitter.populateCredentials(StormSubmitter.java:102)
at
org.apache.storm.StormSubmitter.submitTopologyAs(StormSubmitter.java:219)
at
org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:390)
at
org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:162)
at storm.starter.WordCountTopology.main(WordCountTopology.java:77)
Caused by: java.lang.RuntimeException: The TGT found is not renewable
at
org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:95)
{code}
the user has a valid ticket but it fails still it fails with "TGT found is not
renewable" because service read the storm_jaas_file from
{conf_dir}/storm_jaas.conf while the client_jaas.conf has the right jaas setup
{code}
storm_jaas.conf
StormClient {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="/etc/security/keytabs/storm.headless.keytab"
storeKey=true
useTicketCache=false
serviceName="nimbus"
principal="[email protected]";
};
//client_jaas conf
StormClient {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=true
renewTicket=true
serviceName="nimbus";
};
{code}
was:
{code}
Exception in thread "main" java.lang.RuntimeException:
java.lang.RuntimeException: The TGT found is not renewable
at
org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:104)
at
org.apache.storm.StormSubmitter.populateCredentials(StormSubmitter.java:102)
at
org.apache.storm.StormSubmitter.submitTopologyAs(StormSubmitter.java:219)
at
org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:390)
at
org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:162)
at storm.starter.WordCountTopology.main(WordCountTopology.java:77)
Caused by: java.lang.RuntimeException: The TGT found is not renewable
at
org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:95)
{code}
{code}
the user has a valid ticket but it fails still it fails with "TGT found is not
renewable" because service read the storm_jaas_file from
{conf_dir}/storm_jaas.conf while the client_jaas.conf has the right jaas setup
{code}
storm_jaas.conf
StormClient {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="/etc/security/keytabs/storm.headless.keytab"
storeKey=true
useTicketCache=false
serviceName="nimbus"
principal="[email protected]";
};
//client_jaas conf
StormClient {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=true
renewTicket=true
serviceName="nimbus";
};
{code}
> Storm Service Check fail with 'The TGT found is not renewable'
> --------------------------------------------------------------
>
> Key: AMBARI-24874
> URL: https://issues.apache.org/jira/browse/AMBARI-24874
> Project: Ambari
> Issue Type: Bug
> Environment: AMBARI-2.6.2
> Reporter: Rajkumar Singh
> Priority: Major
>
> {code}
> Exception in thread "main" java.lang.RuntimeException:
> java.lang.RuntimeException: The TGT found is not renewable
> at
> org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:104)
> at
> org.apache.storm.StormSubmitter.populateCredentials(StormSubmitter.java:102)
> at
> org.apache.storm.StormSubmitter.submitTopologyAs(StormSubmitter.java:219)
> at
> org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:390)
> at
> org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:162)
> at storm.starter.WordCountTopology.main(WordCountTopology.java:77)
> Caused by: java.lang.RuntimeException: The TGT found is not renewable
> at
> org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:95)
> {code}
> the user has a valid ticket but it fails still it fails with "TGT found is
> not renewable" because service read the storm_jaas_file from
> {conf_dir}/storm_jaas.conf while the client_jaas.conf has the right jaas setup
> {code}
> storm_jaas.conf
> StormClient {
> com.sun.security.auth.module.Krb5LoginModule required
> useKeyTab=true
> keyTab="/etc/security/keytabs/storm.headless.keytab"
> storeKey=true
> useTicketCache=false
> serviceName="nimbus"
> principal="[email protected]";
> };
> //client_jaas conf
> StormClient {
> com.sun.security.auth.module.Krb5LoginModule required
> useTicketCache=true
> renewTicket=true
> serviceName="nimbus";
> };
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
