yuandeqiao created AMBARI-23356:
-----------------------------------

             Summary: Api Error: Unable to authenticate
                 Key: AMBARI-23356
                 URL: https://issues.apache.org/jira/browse/AMBARI-23356
             Project: Ambari
          Issue Type: Test
            Reporter: yuandeqiao


×
*kdc principal and distribule to other node -->  addprinc -randkey 
[hue/ad...@example.com|mailto:hue/ad...@example.com]*
 
 
 
*hue -->  Api Error: Unable to authenticate*
 
 
*hbase thrift -->* 
 
 
*2018-03-26 15:13:35,596 INFO [main] util.VersionInfo: HBase 1.1.2.2.6.3.0-235*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Source code repository 
git://ctr-e134-1499953498516-254436-01-000003.hwx.site/grid/0/jenkins/workspace/HDP-parallel-centos6/SOURCES/hbase
 revision=6f982c8e667e7a18451fcbc12c5e2758b178ec78*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Compiled by jenkins on 
Mon Oct 30 02:53:33 UTC 2017*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: From source with 
checksum a3bd627e46a9a94cd352d7e907100bb5*
*2018-03-26 15:13:36,047 INFO [main] thrift.ThriftServerRunner: Using default 
thrift server type*
*2018-03-26 15:13:36,048 INFO [main] thrift.ThriftServerRunner: Using thrift 
server type threadpool*
*2018-03-26 15:13:36,613 INFO [main] security.UserGroupInformation: Login 
successful for user hbase/master3.t...@example.com using keytab file 
/etc/security/keytabs/hbase.service.keytab*
*2018-03-26 15:13:36,710 INFO [main] impl.MetricsConfig: loaded properties from 
hadoop-metrics2-hbase.properties*
*2018-03-26 15:13:36,910 INFO [main] timeline.HadoopTimelineMetricsSink: 
Initializing Timeline metrics sink.*
*2018-03-26 15:13:36,911 INFO [main] timeline.HadoopTimelineMetricsSink: 
Identified hostname = master3.test, serviceName = hbase*
*2018-03-26 15:13:36,965 INFO [main] 
availability.MetricSinkWriteShardHostnameHashingStrategy: Calculated collector 
shard master2.test based on hostname: master3.test*
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink: 
Collector Uri: http://master2.test:6188/ws/v1/timeline/metrics*
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink: 
Container Metrics Uri: http://master2.test:6188/ws/v1/timeline/containermetrics*
*2018-03-26 15:13:36,975 INFO [main] impl.MetricsSinkAdapter: Sink timeline 
started*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: Scheduled snapshot 
period at 10 second(s).*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: HBase metrics 
system started*
*2018-03-26 15:13:37,124 INFO [main] mortbay.log: Logging to 
org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via org.mortbay.log.Slf4jLog*
*2018-03-26 15:13:37,127 INFO [main] http.HttpRequestLog: Http request log for 
http.requests.thrift is not defined*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter 
'safety' (class=org.apache.hadoop.hbase.http.HttpServer$QuotingInputFilter)*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter 
'clickjackingprevention' 
(class=org.apache.hadoop.hbase.http.ClickjackingPreventionFilter)*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter 
static_user_filter 
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter) 
to context thrift*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter 
static_user_filter 
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter) 
to context logs*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter 
static_user_filter 
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter) 
to context static*
*2018-03-26 15:13:37,156 INFO [main] http.HttpServer: Jetty bound to port 9095*
*2018-03-26 15:13:37,156 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,459 INFO [main] mortbay.log: Started 
SelectChannelConnector@0.0.0.0:9095*
*2018-03-26 15:13:37,486 INFO [main] thrift.ThriftServerRunner: Starting Thrift 
HTTP Server on 9090*
*2018-03-26 15:13:37,486 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,490 INFO [main] mortbay.log: Started 
SelectChannelConnector@0.0.0.0:9090*
*2018-03-26 15:13:46,228 ERROR [375074687@qtp-890160158-0] 
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,229 ERROR [375074687@qtp-890160158-0] 
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException: 
java.lang.reflect.UndeclaredThrowableException*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
 *at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
 *at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
 *at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
 *at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
 *at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
 *at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
 *at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
 *at org.mortbay.jetty.Server.handle(Server.java:326)*
 *at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
 *at 
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
 *at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
 *at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
 *at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
 *at 
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
 *at 
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
 *at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
 *... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException: 
Authorization header received from the client is empty.*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.getAuthHeader(ThriftHttpServlet.java:212)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:176)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
 *at java.security.AccessController.doPrivileged(Native Method)*
 *at javax.security.auth.Subject.doAs(Subject.java:422)*
 *at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
 *... 17 more*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0] 
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0] 
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException: 
java.lang.reflect.UndeclaredThrowableException*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
 *at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
 *at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
 *at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
 *at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
 *at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
 *at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
 *at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
 *at org.mortbay.jetty.Server.handle(Server.java:326)*
 *at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
 *at 
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
 *at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
 *at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
 *at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
 *at 
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
 *at 
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
 *at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
 *... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException: 
Kerberos authentication failed:* 
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:190)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
 *at java.security.AccessController.doPrivileged(Native Method)*
 *at javax.security.auth.Subject.doAs(Subject.java:422)*
 *at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
 *... 17 more*
*Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism 
level: Checksum failed)*
 *at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:856)*
 *at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)*
 *at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)*
 *at 
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:178)*
 *... 21 more*
*Caused by: KrbException: Checksum failed*
 *at 
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:102)*
 *at 
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:94)*
 *at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:175)*
 *at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:281)*
 *at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:149)*
 *at 
sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108)*
 *at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:829)*
 *... 24 more*
*Caused by: java.security.GeneralSecurityException: Checksum failed*
 *at 
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451)*
 *at 
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decrypt(AesDkCrypto.java:272)*
 *at sun.security.krb5.internal.crypto.Aes256.decrypt(Aes256.java:76)*
 *at 
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:100)*
 *... 30 more*
 
 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to