I have never experienced this problem yet so do not know a straight answer. But
this is what I would have looked at.
Are you running Hadoop in Psedo or Fully-distributed? What is your topology,
where are you running SNN?
- Is the SNN daemon running? (# jps)
- If it is on a separate machine, can you passwordlessly ssh into it
(telnet ipd-address-secondary-nn port)
- Have you tried turning property in hdfs-core/xml to false
<property>
<name>dfs.permissions</name>
<value>false</value>
</property>
- Have you specified in the property the location of your directory
and then created it on local file system .../dfs/namesecondary and changed
owner ship to hdfs:hadoop?
This are just a few places I would start debugging from.
From: a...@hsk.hk [mailto:a...@hsk.hk]
Sent: Tuesday, November 27, 2012 9:14 AM
To: user@hadoop.apache.org
Cc: a...@hsk.hk
Subject: Failed To Start SecondaryNameNode in Secure Mode
Hi,
Please help!
I tried to start SecondaryNameNode in secure mode by the command:
{$HADOOP_HOME}bin/hadoop-daemon.sh start secondarynamenode
1) from the log, I saw "Login successful"
************************************************************/
2012-11-27 22:05:23,120 INFO
org.apache.hadoop.security.UserGroupInformation: Login successful for user
......
2012-11-27 22:05:23,246 INFO
org.apache.hadoop.hdfs.server.namenode.SecondaryNameNode: SHUTDOWN_MSG:
/************************************************************
SHUTDOWN_MSG: Shutting down SecondaryNameNode at ......
************************************************************/
2) However, from the command line, I saw
$ {$HADOOP_HOME}/bin/hadoop-daemon.sh start secondarynamenode
Warning: $HADOOP_HOME is deprecated.
starting secondarynamenode, logging to
/usr/local/hadoop-1.0.4/libexec/../logs/hadoop-hduser-secondarynamenode-m146.out
Exception in thread "main" java.io.IOException: Login failure for
null from keytab /etc/hadoop/hadoop.keytab
at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:716)
at
org.apache.hadoop.hdfs.server.namenode.SecondaryNameNode.initialize(SecondaryNameNode.java:183)
at
org.apache.hadoop.hdfs.server.namenode.SecondaryNameNode.<init>(SecondaryNameNode.java:129)
at
org.apache.hadoop.hdfs.server.namenode.SecondaryNameNode.main(SecondaryNameNode.java:567)
Caused by: javax.security.auth.login.LoginException: Unable to
obtain Princpal Name for authentication
at
com.sun.security.auth.module.Krb5LoginModule.promptForName(Krb5LoginModule.java:733)
at
com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:629)
at
com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:542)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)
There is no secondarynamenode process if I use JPS to check
QUESTION: Any idea where I am wrong?
Thanks
ac
NOTICE: This e-mail message and any attachments are confidential, subject to
copyright and may be privileged. Any unauthorized use, copying or disclosure is
prohibited. If you are not the intended recipient, please delete and contact
the sender immediately. Please consider the environment before printing this
e-mail. AVIS : le pr?sent courriel et toute pi?ce jointe qui l'accompagne sont
confidentiels, prot?g?s par le droit d'auteur et peuvent ?tre couverts par le
secret professionnel. Toute utilisation, copie ou divulgation non autoris?e est
interdite. Si vous n'?tes pas le destinataire pr?vu de ce courriel,
supprimez-le et contactez imm?diatement l'exp?diteur. Veuillez penser ?
l'environnement avant d'imprimer le pr?sent courriel
