Hbase - kerberos認(rèn)證異常

之前怎么認(rèn)證都認(rèn)證不上,問題找了好了,發(fā)現(xiàn)它的異常跟實(shí)際操作根本就對(duì)不上,死馬當(dāng)活馬醫(yī),當(dāng)時(shí)也是瞎改才好的,給大家伙記錄記錄。

KrbException: Server not found in Kerberos database (7) - LOOKING_UP_SERVER
>>> KdcAccessibility: remove storm1.starsriver.cn
    at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:73)
>>> KDCRep: init() encoding tag is 126 req type is 13
    at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:251)
>>>KRBError:
    at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:262)
     cTime is Fri Aug 18 02:49:26 CST 2000 966538166000
     sTime is Tue Jul 31 11:59:12 CST 2018 1533009552000
    at sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:308)
     suSec is 97126
     error code is 7
    at sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:126)
     error Message is Server not found in Kerberos database
    at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:458)
     cname is hbase/lake.dounine.com@dounine.com
    at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:693)
     sname is hbase/120.77.207.19@dounine.com
     msgType is 30
    at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
    at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
    at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192)
    at org.apache.hadoop.hbase.security.AbstractHBaseSaslRpcClient.getInitialResponse(AbstractHBaseSaslRpcClient.java:131)
    at org.apache.hadoop.hbase.security.NettyHBaseSaslRpcClientHandler$1.run(NettyHBaseSaslRpcClientHandler.java:108)
    at org.apache.hadoop.hbase.security.NettyHBaseSaslRpcClientHandler$1.run(NettyHBaseSaslRpcClientHandler.java:104)
    at java.security.AccessController.doPrivileged(Native Method)
    at javax.security.auth.Subject.doAs(Subject.java:422)
    at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1746)
    at org.apache.hadoop.hbase.security.NettyHBaseSaslRpcClientHandler.handlerAdded(NettyHBaseSaslRpcClientHandler.java:104)
    at org.apache.hbase.thirdparty.io.netty.channel.DefaultChannelPipeline.callHandlerAdded0(DefaultChannelPipeline.java:606)
    at org.apache.hbase.thirdparty.io.netty.channel.DefaultChannelPipeline.addFirst(DefaultChannelPipeline.java:187)
    at org.apache.hbase.thirdparty.io.netty.channel.DefaultChannelPipeline.addFirst(DefaultChannelPipeline.java:380)
    at org.apache.hbase.thirdparty.io.netty.channel.DefaultChannelPipeline.addFirst(DefaultChannelPipeline.java:359)
    at org.apache.hadoop.hbase.ipc.NettyRpcConnection.saslNegotiate(NettyRpcConnection.java:200)
    at org.apache.hadoop.hbase.ipc.NettyRpcConnection.access$800(NettyRpcConnection.java:71)
    at org.apache.hadoop.hbase.ipc.NettyRpcConnection$3.operationComplete(NettyRpcConnection.java:273)
    at org.apache.hadoop.hbase.ipc.NettyRpcConnection$3.operationComplete(NettyRpcConnection.java:261)
    at org.apache.hbase.thirdparty.io.netty.util.concurrent.DefaultPromise.notifyListener0(DefaultPromise.java:507)
    at org.apache.hbase.thirdparty.io.netty.util.concurrent.DefaultPromise.notifyListeners0(DefaultPromise.java:500)
    at org.apache.hbase.thirdparty.io.netty.util.concurrent.DefaultPromise.notifyListenersNow(DefaultPromise.java:479)
    at org.apache.hbase.thirdparty.io.netty.util.concurrent.DefaultPromise.notifyListeners(DefaultPromise.java:420)
    at org.apache.hbase.thirdparty.io.netty.util.concurrent.DefaultPromise.trySuccess(DefaultPromise.java:104)
    at org.apache.hbase.thirdparty.io.netty.channel.DefaultChannelPromise.trySuccess(DefaultChannelPromise.java:82)
    at org.apache.hbase.thirdparty.io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.fulfillConnectPromise(AbstractNioChannel.java:306)
    at org.apache.hbase.thirdparty.io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.finishConnect(AbstractNioChannel.java:341)
    at org.apache.hbase.thirdparty.io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:633)
    at org.apache.hbase.thirdparty.io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:580)
    at org.apache.hbase.thirdparty.io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:497)
    at org.apache.hbase.thirdparty.io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:459)
    at org.apache.hbase.thirdparty.io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:858)
    at org.apache.hbase.thirdparty.io.netty.util.concurrent.DefaultThreadFactory$DefaultRunnableDecorator.run(DefaultThreadFactory.java:138)
    at java.lang.Thread.run(Thread.java:748)
Caused by: KrbException: Identifier doesn't match expected value (906)
    at sun.security.krb5.internal.KDCRep.init(KDCRep.java:140)
    at sun.security.krb5.internal.TGSRep.init(TGSRep.java:65)
    at sun.security.krb5.internal.TGSRep.<init>(TGSRep.java:60)
    at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:55)
    ... 39 more

此錯(cuò)誤需要將線上服務(wù)器的域名映射放入Client中的/etc/hosts

10.10.0.2 h1.demo.com
10.10.0.3 h2.demo.com
10.10.0.4 h3.demo.com

?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請(qǐng)聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成,瀏覽時(shí)請(qǐng)結(jié)合常識(shí)與多方信息審慎甄別。
平臺(tái)聲明:文章內(nèi)容(如有圖片或視頻亦包括在內(nèi))由作者上傳并發(fā)布,文章內(nèi)容僅代表作者本人觀點(diǎn),簡(jiǎn)書系信息發(fā)布平臺(tái),僅提供信息存儲(chǔ)服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

  • > 之前怎么認(rèn)證都認(rèn)證不上,問題找了好了,發(fā)現(xiàn)它的異常跟實(shí)際操作根本就對(duì)不上,死馬當(dāng)活馬醫(yī),當(dāng)時(shí)也是瞎改才好的,給...
    kikiki4閱讀 195評(píng)論 0 1
  • > 之前怎么認(rèn)證都認(rèn)證不上,問題找了好了,發(fā)現(xiàn)它的異常跟實(shí)際操作根本就對(duì)不上,死馬當(dāng)活馬醫(yī),當(dāng)時(shí)也是瞎改才好的,給...
    kikiki4閱讀 130評(píng)論 0 2
  • > 之前怎么認(rèn)證都認(rèn)證不上,問題找了好了,發(fā)現(xiàn)它的異常跟實(shí)際操作根本就對(duì)不上,死馬當(dāng)活馬醫(yī),當(dāng)時(shí)也是瞎改才好的,給...
    kikiki4閱讀 134評(píng)論 0 1
  • 之前怎么認(rèn)證都認(rèn)證不上,問題找了好了,發(fā)現(xiàn)它的異常跟實(shí)際操作根本就對(duì)不上,死馬當(dāng)活馬醫(yī),當(dāng)時(shí)也是瞎改才好的,給大家...
    kikiki2閱讀 97評(píng)論 0 1
  • > 之前怎么認(rèn)證都認(rèn)證不上,問題找了好了,發(fā)現(xiàn)它的異常跟實(shí)際操作根本就對(duì)不上,死馬當(dāng)活馬醫(yī),當(dāng)時(shí)也是瞎改才好的,給...
    kikiki4閱讀 118評(píng)論 0 1

友情鏈接更多精彩內(nèi)容