[하둡] 커버로스 인증시 GSS initiate failed 오류문제

커버로스 인증은 성공했는데, 하둡에서 명령을 실행했을때 다음과 같이 "javax.security.sasl.SaslException: GSS initiate failed" 오류가 날때가 있다. 이 문제를 해결하려면 $JAVA_HOME 하위의 security 파일에 krb5.conf 설정을 복사하면 해결된다.

$ kinit product
Password for product@MY-DOMAIN.BAR.COM: <암호입력>

$ hadoop fs -ls /
2022-05-10 18:55:12,732 WARN security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 60 seconds before. Last Login=1652176511912
2022-05-10 18:55:13,181 WARN security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 60 seconds before. Last Login=1652176511912
2022-05-10 18:55:14,610 WARN security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 60 seconds before. Last Login=1652176511912
2022-05-10 18:55:17,655 WARN security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 60 seconds before. Last Login=1652176511912
2022-05-10 18:55:21,462 WARN security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 60 seconds before. Last Login=1652176511912
2022-05-10 18:55:24,660 WARN ipc.Client: Couldn't setup connection for product@MY-DOMAIN.BAR.COM to hadoop001.my-domain.com/10.10.10.1:8020
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) - No service creds)]
        at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211)
        at org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:408)
        at org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:623)
        at org.apache.hadoop.ipc.Client$Connection.access$2300(Client.java:414)

해결방법

$JAVA_HOME/jre/lib/security/ 경로에 krb5.conf 설정을 복사하면 해결된다.

(JAVA_HOME 이 지정안되어있다면, java 설치된 경로를 찾아 지정해주자)

cp /home/owner/krb5.conf $JAVA_HOME/jre/lib/security/

 

그러면, GSS initiate failed 문제가 해결되었다.