hdfs认证报错处理

发布时间 2023-04-21 16:49:26作者: 曲水修竹

hdfs认证报错1

hdfs报错Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]

WARN ipc.Client: Exception encountered while connecting to the server : org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS] mkdir: DestHost:destPort bigdata02:8020 , LocalHost:localPort xxxx01/xxxxx:0. Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]
解决办法:
1.找到当前服务器的/etc/krb5.conf,检查 default_ccache_name是否已经注释了,如果没有注释掉后kdestroy销毁凭证,重新认证

2.检查当前认证主体是是否跟目录一致
kinit -kt hdfs.keytab hdfs/xxxxx

hdfs认证报错2

mkdir: Permission denied: user=xxxx, access=WRITE, inode=

解决办法:

  1. 未开启kerberos的需要切换用户执行
    sudo -u hdfs

  2. 开启kerberos的需要切换到有对应权限的主体