yuandeqiao created AMBARI-23356: ----------------------------------- Summary: Api Error: Unable to authenticate Key: AMBARI-23356 URL: https://issues.apache.org/jira/browse/AMBARI-23356 Project: Ambari Issue Type: Test Reporter: yuandeqiao
× *kdc principal and distribule to other node --> addprinc -randkey [hue/ad...@example.com|mailto:hue/ad...@example.com]* *hue --> Api Error: Unable to authenticate* *hbase thrift -->* *2018-03-26 15:13:35,596 INFO [main] util.VersionInfo: HBase 1.1.2.2.6.3.0-235* *2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Source code repository git://ctr-e134-1499953498516-254436-01-000003.hwx.site/grid/0/jenkins/workspace/HDP-parallel-centos6/SOURCES/hbase revision=6f982c8e667e7a18451fcbc12c5e2758b178ec78* *2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Compiled by jenkins on Mon Oct 30 02:53:33 UTC 2017* *2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: From source with checksum a3bd627e46a9a94cd352d7e907100bb5* *2018-03-26 15:13:36,047 INFO [main] thrift.ThriftServerRunner: Using default thrift server type* *2018-03-26 15:13:36,048 INFO [main] thrift.ThriftServerRunner: Using thrift server type threadpool* *2018-03-26 15:13:36,613 INFO [main] security.UserGroupInformation: Login successful for user hbase/master3.t...@example.com using keytab file /etc/security/keytabs/hbase.service.keytab* *2018-03-26 15:13:36,710 INFO [main] impl.MetricsConfig: loaded properties from hadoop-metrics2-hbase.properties* *2018-03-26 15:13:36,910 INFO [main] timeline.HadoopTimelineMetricsSink: Initializing Timeline metrics sink.* *2018-03-26 15:13:36,911 INFO [main] timeline.HadoopTimelineMetricsSink: Identified hostname = master3.test, serviceName = hbase* *2018-03-26 15:13:36,965 INFO [main] availability.MetricSinkWriteShardHostnameHashingStrategy: Calculated collector shard master2.test based on hostname: master3.test* *2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink: Collector Uri: http://master2.test:6188/ws/v1/timeline/metrics* *2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink: Container Metrics Uri: http://master2.test:6188/ws/v1/timeline/containermetrics* *2018-03-26 15:13:36,975 INFO [main] impl.MetricsSinkAdapter: Sink timeline started* *2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: Scheduled snapshot period at 10 second(s).* *2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: HBase metrics system started* *2018-03-26 15:13:37,124 INFO [main] mortbay.log: Logging to org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via org.mortbay.log.Slf4jLog* *2018-03-26 15:13:37,127 INFO [main] http.HttpRequestLog: Http request log for http.requests.thrift is not defined* *2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter 'safety' (class=org.apache.hadoop.hbase.http.HttpServer$QuotingInputFilter)* *2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter 'clickjackingprevention' (class=org.apache.hadoop.hbase.http.ClickjackingPreventionFilter)* *2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter static_user_filter (class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter) to context thrift* *2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter static_user_filter (class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter) to context logs* *2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter static_user_filter (class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter) to context static* *2018-03-26 15:13:37,156 INFO [main] http.HttpServer: Jetty bound to port 9095* *2018-03-26 15:13:37,156 INFO [main] mortbay.log: jetty-6.1.26.hwx* *2018-03-26 15:13:37,459 INFO [main] mortbay.log: Started SelectChannelConnector@0.0.0.0:9095* *2018-03-26 15:13:37,486 INFO [main] thrift.ThriftServerRunner: Starting Thrift HTTP Server on 9090* *2018-03-26 15:13:37,486 INFO [main] mortbay.log: jetty-6.1.26.hwx* *2018-03-26 15:13:37,490 INFO [main] mortbay.log: Started SelectChannelConnector@0.0.0.0:9090* *2018-03-26 15:13:46,228 ERROR [375074687@qtp-890160158-0] thrift.ThriftHttpServlet: Failed to perform authentication* *2018-03-26 15:13:46,229 ERROR [375074687@qtp-890160158-0] thrift.ThriftHttpServlet: Kerberos Authentication failed* *org.apache.hadoop.hbase.thrift.HttpAuthenticationException: java.lang.reflect.UndeclaredThrowableException* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)* *at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)* *at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)* *at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)* *at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)* *at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)* *at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)* *at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)* *at org.mortbay.jetty.Server.handle(Server.java:326)* *at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)* *at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)* *at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)* *at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)* *at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)* *at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)* *at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)* *Caused by: java.lang.reflect.UndeclaredThrowableException* *at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)* *... 16 more* *Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException: Authorization header received from the client is empty.* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.getAuthHeader(ThriftHttpServlet.java:212)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:176)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)* *at java.security.AccessController.doPrivileged(Native Method)* *at javax.security.auth.Subject.doAs(Subject.java:422)* *at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)* *... 17 more* *2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0] thrift.ThriftHttpServlet: Failed to perform authentication* *2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0] thrift.ThriftHttpServlet: Kerberos Authentication failed* *org.apache.hadoop.hbase.thrift.HttpAuthenticationException: java.lang.reflect.UndeclaredThrowableException* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)* *at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)* *at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)* *at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)* *at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)* *at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)* *at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)* *at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)* *at org.mortbay.jetty.Server.handle(Server.java:326)* *at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)* *at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)* *at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)* *at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)* *at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)* *at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)* *at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)* *Caused by: java.lang.reflect.UndeclaredThrowableException* *at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)* *... 16 more* *Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException: Kerberos authentication failed:* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:190)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)* *at java.security.AccessController.doPrivileged(Native Method)* *at javax.security.auth.Subject.doAs(Subject.java:422)* *at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)* *... 17 more* *Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)* *at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:856)* *at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)* *at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)* *at org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:178)* *... 21 more* *Caused by: KrbException: Checksum failed* *at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:102)* *at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:94)* *at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:175)* *at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:281)* *at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:149)* *at sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108)* *at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:829)* *... 24 more* *Caused by: java.security.GeneralSecurityException: Checksum failed* *at sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451)* *at sun.security.krb5.internal.crypto.dk.AesDkCrypto.decrypt(AesDkCrypto.java:272)* *at sun.security.krb5.internal.crypto.Aes256.decrypt(Aes256.java:76)* *at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:100)* *... 30 more* -- This message was sent by Atlassian JIRA (v7.6.3#76005)