Hello All, Any suggestion on this ?
*Is there anyway we can avoid this TGT Renewal check or how to resolve.* Regards, Prakash R On Tue, Jan 9, 2018 at 3:31 PM, prakash r <[email protected]> wrote: > Hello, > > We are facing issue with starting a topology when Storm is kerberosed. > > 1189 [main] INFO o.a.s.s.a.AuthUtils - Got AutoCreds > [org.apache.storm.security.auth.kerberos.AutoTGT@129b4fe2] > > 1189 [main] INFO o.a.s.StormSubmitter - Running > org.apache.storm.security.auth.kerberos.AutoTGT@129b4fe2 > Exception in thread "main" java.lang.RuntimeException: > java.lang.RuntimeException: The TGT found is not renewable > at > org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:103) > at > org.apache.storm.StormSubmitter.populateCredentials(StormSubmitter.java:94) > at > org.apache.storm.StormSubmitter.submitTopologyAs(StormSubmitter.java:214) > at > org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:310) > at > org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:157) > at storm.starter.WordCountTopology.main(WordCountTopology.java:77) > Caused by: java.lang.RuntimeException: The TGT found is not renewable > at > org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:94) > > ... 5 more > > When we check the Keberos Principal which as R Flag as well. > > We tried even regenerating the keytabs, this problem is not resolved. > > When we submit from new keytab principal, this is working fine. > > *Can you please suggest, is there anyway we can avoid this TGT Renewal > check or how to resolve.* > > *OS version :* > Red Hat Enterprise Linux Server release 7.4 (Maipo) > > > *Problematic principal details :* > [storm@cbro-test-stm1 ~]$ klist -f > Ticket cache: FILE:/tmp/krb5cc_1021 > Default principal: [email protected] > > Valid starting Expires Service principal > 01/06/2018 22:30:40 01/07/2018 08:30:40 krbtgt/[email protected] > renew until 01/12/2018 13:54:47, Flags: FRIAT > > > > *Working principal details :* > [metron@cbro-test-edg4 ~]$ klist -f > Ticket cache: FILE:/tmp/krb5cc_1024 > Default principal: [email protected] > > Valid starting Expires Service principal > 01/09/2018 15:28:47 01/10/2018 01:28:47 krbtgt/[email protected] > renew until 01/16/2018 15:28:47, Flags: FRIA > > > Regards, > Prakash R >
