Linux services like Apache, Nginx, etc can use keytab files for Kerberos authentication in Active Directory without entering any password. The keytab file keeps the names of Kerberos principals and the corresponding encrypted keys.
Then, we bind a service principal name SPN to the user account. We need not perform this step separately since ktpass does it automatically when creating a keytab file Here, we will do it so that you understand the process better. The SPN record is bound to the web account with the specified password. We make sure that the SPN record for the service has been successfully created if you did not create it manually :. Windows do not have built-in tools to view the contents of the keytab file.
However, if Java JRE is present on the computer, we can use klist. We had a customer with the below error message. Shyam Shaw Awesome. I am glad it worked. Take the backup of database. Login to mysql with root or ambari account and remove hive keytabs. Note: its not only for Hive.. You can try to 'Regenerate Keytabs' in Ambari.
While doing that, you need to check 'Only regenerate keytabs for missing hosts and components' option. If that doesn't work, you can regenerate all the keytabs for all hosts which requires all components to be restarted. Hope that helps. Sorry for re-opening this, but I am facing a similar problem and unable to delete this from ambari database. I'm rencontring the same issue , I tried to remove keberos entries,but I still have the same issue.
Any help please? FR , Hostname ppla Support Questions. Find answers, ask questions, and share your expertise. Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Showing results for. Search instead for. Learn more. Asked 5 years, 10 months ago. Active 5 years, 10 months ago.
Viewed 2k times. Add a comment. Active Oldest Votes. Philipp Grigoryev Philipp Grigoryev 1, 2 2 gold badges 14 14 silver badges 20 20 bronze badges. You have to obtain a curl binary for Windows which says with curl --version : curl 7. Protocols: http https Michael-O Michael-O Get a version compiled with SSPI. Sign up or log in Sign up using Google.
Sign up using Facebook. Sign up using Email and Password.
0コメント