Hi Ranjith, I am trying to know more detail about your suggested ways.
When I have this issue in the past I had to get a new ticket using the MIT ticket manager. On which machine I use MIT ticket manager? The hdfs cluster? The DC host? Or the client from which I am accessing webhdfs server Also can you check your krb5.conf is the same as that in your cluster? You mean check the krb5.conf of my client which is WIN10 in this case? Thanks, Jingfei From: Ranjith Raghunath [mailto:[email protected]] Sent: Friday, October 9, 2015 8:57 PM To: [email protected] Subject: RE: GSSException: Defective token detected When I have this issue in the past I had to get a new ticket using the MIT ticket manager. Can you do that and try it again? Also can you check your krb5.conf is the same as that in your cluster? On Oct 9, 2015 12:12 AM, "Jingfei Hu" <[email protected] <mailto:[email protected]> > wrote: Yes. I can open http://xxxx:8088/cluster. From: Ranjith Raghunath [mailto:[email protected]] Sent: Friday, October 9, 2015 11:52 AM To: [email protected] <mailto:[email protected]> Subject: RE: GSSException: Defective token detected Do any of the other UIs work? For example YARN application manager ui, etc.? On Oct 8, 2015 10:50 PM, "Jingfei Hu" <[email protected] <mailto:[email protected]> > wrote: I am using IE to access uri http://xxxx:50070/webhdfs/v1/?op=GetHomeDirectory In the domain controller host, I can access this url without any problems. From: Ranjith Raghunath [mailto:[email protected] <mailto:[email protected]> ] Sent: Friday, October 9, 2015 11:41 AM To: [email protected] <mailto:[email protected]> Cc: [email protected] <mailto:[email protected]> Subject: Re: GSSException: Defective token detected Are you using Firefox or chrome? Also, what webpage are you accessing (resource manager, namenode, etc.)? On Oct 8, 2015 10:20 PM, "Jingfei Hu" <[email protected] <mailto:[email protected]> > wrote: HTTP ERROR 403 Problem accessing /webhdfs/v1/. Reason: GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag) Powered by Jetty:// Anyone knows what’s happening here? I’ve setup a hdfs cluster with Kerberos authentication installed and configured. I can access from the DC (Domain controller) host but can’t access it from other machines. Any steps I am missing? Thanks, Jingfei
