I'm trying to configure Yarn(hadoop-2.7.2) With Kerberos。Here is my configuration file in yarn-site.xml。 *<property>* * <name>yarn.resourcemanager.keytab</name>* * <value>/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab</value>* * </property>* * <property>* * <name>yarn.resourcemanager.principal</name>* * <value>yarn/_h...@hadoop.com <h...@hadoop.com></value>* * </property>* * <property>* * <name>yarn.nodemanager.keytab</name>* * <value>/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab</value>* * </property>* * <property>* * <name>yarn.nodemanager.principal</name>* * <value>yarn/_h...@hadoop.com <h...@hadoop.com></value>* * </property>* * <property>* * <name>yarn.nodemanager.linux-container-executor.path</name>* * <value>/home/yarn/software/hadoop/bin/container-executor</value>* * </property>* * <property>* * <name>yarn.nodemanager.container-executor.class</name>* * <value>org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor</value>* * </property>* * <property>* * <name>yarn.nodemanager.linux-container-executor.group</name>* * <value>yarn</value>* * </property>*
the keytab file is in its location, its owner is yarn. But when I try to start job, I see this message on the log: 2016-10-31 19:30:00,743 WARN org.apache.hadoop.yarn.server. nodemanager.containermanager.localizer.ResourceLocalizationService: { hdfs://tempt48:9000/home/yarn/staging/xjc/.staging/job_1477641527809_0017/job.jar, 1477913393217, PATTERN, (?:classes/|lib/).* } failed: Login failure for yarn/temp...@hadoop.com from keytab /home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab: javax.security.auth.login.LoginException: Unable to obtain password from user tempt48 is resourcemanager'node ,tempt57 is nodemanager's node. keytab file in tempt57 *[yarn@tempt57 sbin]$ klist -kt /home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab * *Keytab name: FILE:/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab* *KVNO Timestamp Principal* *---- ----------------- --------------------------------------------------------* * 2 10/31/16 17:30:06 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/31/16 17:30:06 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/31/16 17:30:07 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/31/16 17:30:07 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/31/16 17:30:07 yarn/temp...@hadoop.com <temp...@hadoop.com>* keytab file in tempt48 *[yarn@tempt48 sbin]$ klist -kt /home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab* *Keytab name: FILE:/home/yarn/software/hadoop/etc/hadoop/conf/yarn.keytab* *KVNO Timestamp Principal* *---- ----------------- --------------------------------------------------------* * 2 10/14/16 12:00:18 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/14/16 12:00:18 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/14/16 12:00:18 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/14/16 12:00:19 yarn/temp...@hadoop.com <temp...@hadoop.com>* * 2 10/14/16 12:00:19 yarn/temp...@hadoop.com <temp...@hadoop.com>* Any help would be highly appreciated. *Best regards*