[
https://issues.apache.org/jira/browse/HDDS-14578?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sarveksha Yeshavantha Raju resolved HDDS-14578.
-----------------------------------------------
Fix Version/s: 2.2.0
Resolution: Fixed
> Ozone admin command gives inconsistent error messages on expired keytab.
> ------------------------------------------------------------------------
>
> Key: HDDS-14578
> URL: https://issues.apache.org/jira/browse/HDDS-14578
> Project: Apache Ozone
> Issue Type: Bug
> Components: Ozone CLI
> Affects Versions: 2.0.0
> Reporter: Soumitra Sulav
> Assignee: Sravani Revuri
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.2.0
>
>
> Ozone admin command gives inconsistent error messages on expired keytab for
> the following commands:
> # ozone admin safemode status
> # ozone admin container create
> # ozone admin container info
> {code:java}
> bash-5.1$ ozone admin safemode status
> Service ID: scmservice
> Could not determine leader node
> {code}
> {code:java}
> bash-5.1$ ozone admin container create
> java.security.cert.CertificateException:
> org.apache.hadoop.security.AccessControlException: Permission denied.
> {code}
> {code:java}
> ~# ozone admin container info 69017
> Unable to retrieve the container details for 69017
> ~# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: [email protected] starting Expires
> Service principal
> 01/30/2026 10:33:22 01/30/2026 20:33:22 krbtgt/[email protected]
> renew until 01/31/2026 10:33:10
> ~# date
> Fri Feb 6 12:05:53 PM UTC 2026
> root@ve1328:~# ozone admin scm roles
> DestHost:destPort ve.example.com:9860 , LocalHost:localPort
> ve.example.com/10.xx:0. Failed on local exception: java.io.IOException:
> org.apache.hadoop.security.AccessControlException: Client cannot authenticate
> via:[KERBEROS]
> root@ve1328:~# ozone admin container info 69017
> Unable to retrieve the container details for 69017
> ~# kinit -kt scm.keytab scm
> ~# ozone admin container info 69017
> Container id: 69017
> Pipeline id: 3c8208ce-46ca-4435-8554-f07a58ec6bf7
> Write PipelineId: 7a571825-4751-4876-a6ac-acc4c097f282
> Write Pipeline State: CLOSED
> Container State: CLOSED{code}
> Works again on renewing the Kerberos credentials
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
