?????? org.apache.hadoop.security.AccessControlException:Client cannot authenticate via:[TOKEN,KERBEROS]

[qq]

Hello:
     
        The following error occurred while running the MapReduce task using 
Oozie:
WARN ParameterVerifier:523 - SERVER[vm2822] USER[-] GROUP[-] TOKEN[-] APP[-] 
JOB[-] ACTION[-] The application does not define foraml parameters in its XML 
definition
WARN MapReduceActionException:523 - SERVER[VM28220] USER[OOZIE] GROUP[-] 
TOKEN[] APP[map-reduce-wf] JOB[0000001-200609172327130-oozie-root-W] 
ACTION[0000001-200609172327130-oozie-root-W@mr-node] No credential properties 
found action:0000001-200609172327130-oozie-root-W@mr-node,cred:null
WARN HadoopTokenHelper:523 - SERVER[vm28220] USER[oozie] GROUP[-] TOKEN[] 
APP[map-reduce-wf] JOB[0000001-200609172327130-oozie-root-W] 
ACTION[0000001-200609172327130-oozie-root-W@mr-node] An error happened while 
trying to get server principal.Getting it from service principal anyway.
WARN ActionStartXCommand:523 - SERVER[VM28220] USER[OOZIE] GROUP[-] TOKEN[] 
APP[map-reduce-wf] JOB[0000001-200609172327130-oozie-root-W] 
ACTION[0000001-200609172327130-oozie-root-W@mr-node] Error starting action 
[mr-node].ErrorType 
[TRANSIENT],ErrorCode[JA009],Message[JA009:DestHost:destPort vm28220:10020, 
LocalHost:localPort vm28220/27.28.2.20:0.Failed on local 
execption:java.io.IOException:org.apache.hadoop.security.AccessControlException:Client
 cannot authenticate via:[TOKEN,KERBEROS]


        The cluster environment information is as follows:
        oozie version is 5.2.0
        hadoop version is 3.2.1
        the authentication mode is kerberos.


        When I delete the code in red, the problem was solved. as follows:
    private void addHadoopCredentialPropertiesToActionConf(Map<String, 
CredentialsProperties&gt; credentialsProperties) {
        LOG.info("Adding default credentials for action: hdfs, yarn and jhs");
        addHadoopCredentialProperties(credentialsProperties, 
CredentialsProviderFactory.HDFS);
        addHadoopCredentialProperties(credentialsProperties, 
CredentialsProviderFactory.YARN);
        addHadoopCredentialProperties(credentialsProperties, 
CredentialsProviderFactory.JHS);
    }


&nbsp; &nbsp;&nbsp; &nbsp;Can anyone tell me other ways to solve this problem?
&nbsp; &nbsp; &nbsp;
thinks.
I am looking forward to your reply??





------------------&nbsp;????????&nbsp;------------------
??????:                                                                         
                                               "user"                           
                                                         
<gezap...@cloudera.com.INVALID&gt;;
????????:&nbsp;2020??7??14??(??????) ????11:45
??????:&nbsp;"user"<user@oozie.apache.org&gt;;

????:&nbsp;Re: org.apache.hadoop.security.AccessControlException:Client cannot 
authenticate via:[TOKEN,KERBEROS]



Hey,
I can't see any of the images you've posted. Can you change them to code
snippets?
Thank you
gp

On Tue, Jul 14, 2020 at 5:28 PM qq <987626...@qq.com&gt; wrote:

&gt; Hello:
&gt;
&gt; The following error occurred while running the MapReduce task using Oozie:
&gt;
&gt;
&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The cluster environment 
information is as follows:
&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; oozie version is 5.2.0
&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hadoop version is 3.2.1
&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; the authentication mode is 
kerberos.
&gt;
&gt; When I deleted the code in the red box, the problem was solved.
&gt;
&gt;&nbsp;&nbsp;&nbsp;&nbsp; Can anyone tell me other ways to solve this 
problem?
&gt;
&gt; thinks.
&gt; I am looking forward to your reply??
&gt;


-- 
*Peter Cseh* | Software Engineer, Cloudera Search
cloudera.com <https://www.cloudera.com&gt;
[image: Cloudera] <https://www.cloudera.com/&gt;
[image: Cloudera on Twitter] <https://twitter.com/cloudera&gt; [image:
Cloudera on Facebook] <https://www.facebook.com/cloudera&gt; [image: Cloudera
on LinkedIn] <https://www.linkedin.com/company/cloudera&gt;
<https://www.cloudera.com/&gt;
------------------------------