[ 
https://issues.apache.org/jira/browse/HDDS-14047?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18051421#comment-18051421
 ] 

Gargi Jaiswal edited comment on HDDS-14047 at 1/13/26 4:44 AM:
---------------------------------------------------------------

The DN reconfiguration problem is because the `dfs.datanode.kerberos.principal` 
property value is different in DN and Client side.

DN side *“dfs.datanode.kerberos.principal“* is configured to 
*“dn/[email protected]”* in ozone-site.xml, but Client, it uses 
{color:#de350b}ozone-site.xml{color} which doesn’t have this property 
configured, so it fallback to the property in 
{color:#de350b}hdfs-site.xml{color}, where *“dfs.datanode.kerberos.principal”* 
value is {*}“hdfs/[email protected]“{*}.

Add “dfs.datanode.kerberos.principal” with value “dn/[email protected]” in 
/etc/ozone/conf.cloudera.OZONE-1/ozone-site.xml will solve the problem.
Its better if we have default value set for `hdds.datanode.kerberos.principal`.


was (Author: JIRAUSER308350):
The DN reconfiguration problem is because the `dfs.datanode.kerberos.principal` 
property value is different in DN and Client side.

DN side *“dfs.datanode.kerberos.principal“* is configured to 
*“dn/[email protected]”* in ozone-site.xml, but Client, it uses 
{color:#de350b}/etc/ozone/conf.cloudera.OZONE-1/ozone-site.xml{color} which 
doesn’t have this property configured, so it fallback to the property in 
{color:#de350b}/etc/ozone/conf.cloudera.OZONE-1/hdfs-site.xml{color}, where 
*“dfs.datanode.kerberos.principal”* value is 
{*}“hdfs/[email protected]“{*}.

Add “dfs.datanode.kerberos.principal” with value “dn/[email protected]” in 
/etc/ozone/conf.cloudera.OZONE-1/ozone-site.xml will solve the problem.
Its better if we have default value set for `hdds.datanode.kerberos.principal`.

> [DiskBalancer] Status command fails due to invalid Kerberos principal on 
> datanodes
> ----------------------------------------------------------------------------------
>
>                 Key: HDDS-14047
>                 URL: https://issues.apache.org/jira/browse/HDDS-14047
>             Project: Apache Ozone
>          Issue Type: Bug
>            Reporter: Elavarasan Kathirvel
>            Assignee: Gargi Jaiswal
>            Priority: Major
>              Labels: diskbalancer
>
> The {{ozone admin datanode diskbalancer status --in-service-datanodes}} 
> command fails across all datanodes due to incorrect Kerberos principals. 
> Datanodes are using the {{dn/<hostname>}} principal. As a result, 
> DiskBalancer cannot authenticate and returns failures for all nodes.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to