* Name node and secondary name nodes on different machines * Kerberos was just enabled * Cloudera CDH 4.5 on Centos
*Secondary name node log (HOST2) shows following* 2013-12-31 22:00:11,728 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS) cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException: Image transfer servlet at http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235failed with status code 403 Response message: Only Namenode, Secondary Namenode, and administrators may access this servlet *Name Node Log (HOST1) shows following* 2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE) 2013-12-31 21:59:56,213 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol ... 2013-12-31 21:59:56,612 INFO org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet rejecting: hdfs/2NN-host@REALM 2013-12-31 21:59:56,615 WARN org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received non-NN/SNN/administrator request for image or edits from hdfs/2NN-host@REALMat 2NN-host-IP -- Thanks, Manoj
