I have installed Accumulo 1.5.1.2.1.7.0-784 on a kerberized vm for testing purposes following the instructions in the readme. It looked good (create table/scan, monitor page, etc) but then it started throwing ThriftSecurityExceptions in the TServer logs. Looks like the tserver process hasn't authenticated to the accumulo service user.
When I look at the tserver log I see these near at the top: 2014-11-15 16:38:39,063 [server.Accumulo] INFO : general.kerberos.keytab = /etc/security/keytabs/accumulo.service.keytab 2014-11-15 16:38:39,063 [server.Accumulo] INFO : general.kerberos.principal = accumulo/[email protected] ...snip... 2014-11-15 16:38:39,911 [security.UserGroupInformation] INFO : Login successful for user accumulo/[email protected] using keytab file /etc/security/keytabs/accumulo.service.keytab 2014-11-15 16:38:39,911 [security.SecurityUtil] INFO : Succesfully logged in as user accumulo/[email protected] 2014-11-15 16:38:40,464 [tabletserver.TabletServer] INFO : port = 9997 2014-11-15 16:38:48,232 [tabletserver.TabletServer] INFO : Loading tablet !0;!0<< 2014-11-15 16:38:48,253 [tabletserver.TabletServer] INFO : localhost/127.0.0.1:9997: got assignment from master: !0;!0<< 2014-11-15 16:38:48,351 [util.MetadataTable] INFO : Scanning logging entries for !0;!0<< 2014-11-15 16:38:48,351 [util.MetadataTable] INFO : Getting logs for root tablet from zookeeper 2014-11-15 16:38:48,354 [util.MetadataTable] INFO : Returning logs [] for extent !0;!0<< 2014-11-15 16:38:48,576 [client.ClientServiceHandler] ERROR: ThriftSecurityException(user:root, code:BAD_CREDENTIALS) /user/accumulo is chowned to accumulo:hdfs and I can see the metadata rfiles when I kinit to the accumulo account and browse the filesystem. Any notion what I've done wrong? Thanks! -David...
