When you looked at the network traffic (Via Browser Web Tools) with YARN Web UI and WebHDFS/ HDFS WebUI, did you see the same SPNEGO handshake?
Allan ________________________________________ From: 张宇 <[email protected]> Sent: Monday, March 30, 2026 3:34 AM To: user Subject: [Help] Hadoop 3.3.6 HDFS WebUI authentication issue (Windows client) Hi all, I'm encountering an authentication issue with HDFS WebUI in Hadoop 3.3.6: - Cluster status: HDFS backend services (NameNode/DataNode) are running normally (can operate HDFS via hdfs dfs commands on the server). - Windows client: I've obtained a valid Kerberos ticket (via kinit ), but when accessing HDFS WebUI ( https://openeuler:9871/explorer.html ), it shows: Failed to obtain user group information: java.io.IOException: Security enabled but user not authenticated by filter - Other info: YARN WebUI is accessible, but HDFS WebUI keeps reporting authentication errors even after the client has a valid Kerberos ticket. - Also, I noticed that the Apache JIRA ticket HDFS-16441 seems to cover a similar WebUI authentication issue in Hadoop 3.3 versions? I've tried configuring SPNEGO (following the official docs) and verifying the Kerberos ticket (with klist showing a valid forwardable ticket), but the issue persists.
