HPE Community
HPE Ezmeral Software platform
1819523 Members
3135 Online
109603 Solutions
New Discussion

Re: MapR-7.9.0 EEP 9.3.2 kerberos ticket generation failing

 
Satish_Infa
Advisor

2 weeks ago - last edited 2 weeks ago by

2 weeks ago - last edited 2 weeks ago by

MapR-7.9.0 EEP 9.3.2 kerberos ticket generation failing


[root@invrh94mapr7201 conf]# kinit -kt mapr.keytab mapr/mapR-invrh94mapr7201@INFAKRB.INFADEV.COM
[root@invrh94mapr7201 conf]# maprlogin kerberos
>>>KinitOptions cache name is /tmp/krb5cc_0
>>>DEBUG <CCacheInputStream> client principal is mapr/mapR-invrh94mapr7201@INFAKRB.INFADEV.COM
>>>DEBUG <CCacheInputStream> server principal is krb5_ccache_conf_data/pa_type/krbtgt/INFAKRB.INFADEV.COM\@INFAKRB.INFADEV.COM@X-CACHECONF:

Failure in kerberos handshake Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP-REQ - RC4 with HMAC)


[root@invrh94mapr7201 conf]# cat /etc/krb5.conf
[libdefaults]
default_realm = INFAKRB.INFADEV.COM
dns_lookup_kdc = false
dns_lookup_realm = false
ticket_lifetime = 86400
renew_lifetime = 604800
forwardable = true
default_tgs_enctypes = arcfour-hmac
default_tkt_enctypes = arcfour-hmac
permitted_enctypes = arcfour-hmac
allow_weak_crypto = true
udp_preference_limit = 1
kdc_timeout = 3000
[realms]
INFAKRB.INFADEV.COM = {
kdc = INVI12KERDC02.INFAKRB.INFADEV.COM
admin_server = INVI12KERDC02.INFAKRB.INFADEV.COM
}
[domain_realm]

[root@invrh94mapr7201 conf]#

0 Kudos
Reply
3 REPLIES 3
Chetanya
HPE Pro

2 weeks ago

2 weeks ago

Re: MapR-7.9.0 EEP 9.3.2 kerberos ticket generation failing

Hello,

Can you please share the output of below command.

#klist -kte mapr.keytab

Thanks



I work at HPE
HPE Support Center offers support for your HPE services and products when and how you need it. Get started with HPE Support Center today.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
Accept or Kudo
0 Kudos
Reply
support_s
System Recommended

a week ago

a week ago

Query: MapR-7.9.0 EEP 9.3.2 kerberos ticket generation failing

Hello,

 

Let us know if you were able to resolve the issue.

If you are satisfied with the answers then kindly click the "Accept As Solution" button for the most helpful response so that it is beneficial to all community members.

 

 

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".


Accept or Kudo

0 Kudos
Reply
Satish_Infa
Advisor

Thursday - last edited Sunday by

Thursday - last edited Sunday by

Re: MapR-7.9.0 EEP 9.3.2 kerberos ticket generation failing

@Chetanya 

[root@invrh94mapr7201 conf]# klist -kte mapr.keytab
Keytab name: FILE:mapr.keytab
KVNO Timestamp Principal
---- ------------------- ------------------------------------------------------
3 03/27/2025 09:25:42 mapr/mapR-invrh94mapr7201@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 mapr/mapR-invrh94mapr7201@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 mapr/mapR-invrh94mapr7201@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 mapr/mapR-invrh94mapr7201@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/mapR-invrh94mapr7201@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 mapr/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 mapr/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 mapr/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 mapr/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 mapr/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 mapr/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 mapr/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 mapr/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 mapr/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 mapr/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 mapr/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 mapr/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 mapr/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7201.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7202.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7203.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-crc)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:des-cbc-md5)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (DEPRECATED:arcfour-hmac)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (aes256-cts-hmac-sha1-96)
3 03/27/2025 09:25:42 HTTP/invrh94mapr7204.informatica.com@INFAKRB.INFADEV.COM (aes128-cts-hmac-sha1-96)

0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.