Hi,

What is your version of Java ? Does it support Kerberos ?
Regards,


Loïc

Loïc CHANEL
System Big Data engineer
Vision 360 Degrés (Lyon, France)

2018-05-10 18:49 GMT+02:00 Lian Jiang <[email protected]>:

> Thanks for any hint.
>
> On Tue, May 8, 2018 at 4:25 PM, Lian Jiang <[email protected]> wrote:
>
>> Hi,
>>
>> I am enable Spnego per https://docs.hortonworks.com/H
>> DPDocuments/Ambari-2.2.1.1/bk_Ambari_Security_Guide/content/
>> _configuring_http_authentication_for_HDFS_YARN_MapReduce2_
>> HBase_Oozie_Falcon_and_Storm.html.
>>
>> However, my name node cannot start due to exception:
>>
>> java.lang.ClassNotFoundException:  kerberos
>>         at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
>>         at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
>>         at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:331)
>>         at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
>>         at org.mortbay.jetty.webapp.WebAppClassLoader.loadClass(WebAppC
>> lassLoader.java:401)
>>         at org.mortbay.jetty.webapp.WebAppClassLoader.loadClass(WebAppC
>> lassLoader.java:363)
>>         at org.apache.hadoop.security.authentication.server.Authenticat
>> ionFilter.initializeAuthHandler(AuthenticationFil
>> ter.java:245)
>>         at org.apache.hadoop.security.authentication.server.Authenticat
>> ionFilter.init(AuthenticationFilter.java:233)
>>         at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.
>> java:97)
>>         at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCy
>> cle.java:50)
>>         at org.mortbay.jetty.servlet.ServletHandler.initialize(ServletH
>> andler.java:713)
>>         at org.mortbay.jetty.servlet.Context.startContext(Context.java:
>> 140)
>>         at org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppCo
>> ntext.java:1282)
>>         at org.mortbay.jetty.handler.ContextHandler.doStart(ContextHand
>> ler.java:518)
>>         at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext
>> .java:499)
>>         at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCy
>> cle.java:50)
>>         at org.mortbay.jetty.handler.HandlerCollection.doStart(HandlerC
>> ollection.java:152)
>>         at org.mortbay.jetty.handler.ContextHandlerCollection.doStart(C
>> ontextHandlerCollection.java:156)
>>         at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCy
>> cle.java:50)
>>         at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrap
>> per.java:130)
>>         at org.mortbay.jetty.Server.doStart(Server.java:224)
>>         at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCy
>> cle.java:50)
>>         at org.apache.hadoop.http.HttpServer2.start(HttpServer2.java:938)
>>         at org.apache.hadoop.hdfs.server.namenode.NameNodeHttpServer.st
>> art(NameNodeHttpServer.java:170)
>>         at org.apache.hadoop.hdfs.server.namenode.NameNode.startHttpSer
>> ver(NameNode.java:942)
>>         at org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(N
>> ameNode.java:755)
>>         at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameN
>> ode.java:1001)
>>         at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameN
>> ode.java:985)
>>         at org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNo
>> de(NameNode.java:1710)
>>         at org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNod
>> e.java:1778)
>>
>>
>> The related core-site config is:
>>
>> "hadoop.http.authentication.simple.anonymous.allowed" : "false",
>>             "hadoop.http.authentication.signature.secret.file" :
>> "/etc/security/http_secret",
>>             "hadoop.http.authentication.type" : "kerberos",
>>             "hadoop.http.authentication.kerberos.keytab" :
>> "/etc/security/keytabs/spnego.service.keytab",
>>             "hadoop.http.authentication.kerberos.principal" : "HTTP/_
>> HOST@test_kdc.com",
>>             "hadoop.http.filter.initializers" : "
>> org.apache.hadoop.security.AuthenticationFilterInitializer",
>>             "hadoop.http.authentication.cookie.domain" : "
>> subnet1.hadoop.oraclevcn.com"
>>
>> Any idea? Appreciate!
>>
>
>

Reply via email to