[ https://issues.apache.org/jira/browse/AMBARI-24874?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rajkumar Singh updated AMBARI-24874: ------------------------------------ Status: Open (was: Patch Available) > Storm Service Check fail with 'The TGT found is not renewable' > -------------------------------------------------------------- > > Key: AMBARI-24874 > URL: https://issues.apache.org/jira/browse/AMBARI-24874 > Project: Ambari > Issue Type: Bug > Affects Versions: 2.6.2 > Environment: AMBARI-2.6.2 > Reporter: Rajkumar Singh > Priority: Major > Attachments: AMBARI-24874-branch-2.6, AMBARI-24874-branch-2.6, > AMBARI-24874-branch-2.6.patch > > > {code} > Exception in thread "main" java.lang.RuntimeException: > java.lang.RuntimeException: The TGT found is not renewable > at > org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:104) > at > org.apache.storm.StormSubmitter.populateCredentials(StormSubmitter.java:102) > at > org.apache.storm.StormSubmitter.submitTopologyAs(StormSubmitter.java:219) > at > org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:390) > at > org.apache.storm.StormSubmitter.submitTopology(StormSubmitter.java:162) > at storm.starter.WordCountTopology.main(WordCountTopology.java:77) > Caused by: java.lang.RuntimeException: The TGT found is not renewable > at > org.apache.storm.security.auth.kerberos.AutoTGT.populateCredentials(AutoTGT.java:95) > {code} > the user has a valid ticket but it fails still it fails with "TGT found is > not renewable" because service read the storm_jaas_file from > {conf_dir}/storm_jaas.conf while the client_jaas.conf has the right jaas setup > {code} > storm_jaas.conf > StormClient { > com.sun.security.auth.module.Krb5LoginModule required > useKeyTab=true > keyTab="/etc/security/keytabs/storm.headless.keytab" > storeKey=true > useTicketCache=false > serviceName="nimbus" > principal="storm-ti...@devfg.rbc.com"; > }; > //client_jaas conf > StormClient { > com.sun.security.auth.module.Krb5LoginModule required > useTicketCache=true > renewTicket=true > serviceName="nimbus"; > }; > {code} -- This message was sent by Atlassian JIRA (v7.6.3#76005)