Hi,
I am enable Spnego per
https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.1/bk_Ambari_Security_Guide/content/_configuring_http_authentication_for_HDFS_YARN_MapReduce2_HBase_Oozie_Falcon_and_Storm.html
.
However, my name node cannot start due to exception:
java.lang.ClassNotFoundException: kerberos
at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:331)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at
org.mortbay.jetty.webapp.WebAppClassLoader.loadClass(WebAppClassLoader.java:401)
at
org.mortbay.jetty.webapp.WebAppClassLoader.loadClass(WebAppClassLoader.java:363)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.initializeAuthHandler(AuthenticationFil
ter.java:245)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:233)
at
org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:97)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at
org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:713)
at org.mortbay.jetty.servlet.Context.startContext(Context.java:140)
at
org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1282)
at
org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:518)
at
org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:499)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at
org.mortbay.jetty.handler.HandlerCollection.doStart(HandlerCollection.java:152)
at
org.mortbay.jetty.handler.ContextHandlerCollection.doStart(ContextHandlerCollection.java:156)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at
org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:130)
at org.mortbay.jetty.Server.doStart(Server.java:224)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at org.apache.hadoop.http.HttpServer2.start(HttpServer2.java:938)
at
org.apache.hadoop.hdfs.server.namenode.NameNodeHttpServer.start(NameNodeHttpServer.java:170)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.startHttpServer(NameNode.java:942)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:755)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:1001)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:985)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1710)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNode.java:1778)
The related core-site config is:
"hadoop.http.authentication.simple.anonymous.allowed" : "false",
"hadoop.http.authentication.signature.secret.file" :
"/etc/security/http_secret",
"hadoop.http.authentication.type" : "kerberos",
"hadoop.http.authentication.kerberos.keytab" :
"/etc/security/keytabs/spnego.service.keytab",
"hadoop.http.authentication.kerberos.principal" : "HTTP/_
HOST@test_kdc.com",
"hadoop.http.filter.initializers" :
"org.apache.hadoop.security.AuthenticationFilterInitializer",
"hadoop.http.authentication.cookie.domain" : "
subnet1.hadoop.oraclevcn.com"
Any idea? Appreciate!
