hdfs认证报错1
hdfs报错Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]
WARN ipc.Client: Exception encountered while connecting to the server : org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS] mkdir: DestHost:destPort bigdata02:8020 , LocalHost:localPort xxxx01/xxxxx:0. Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]
解决办法:
1.找到当前服务器的/etc/krb5.conf,检查 default_ccache_name是否已经注释了,如果没有注释掉后kdestroy销毁凭证,重新认证
2.检查当前认证主体是是否跟目录一致
kinit -kt hdfs.keytab hdfs/xxxxx
hdfs认证报错2
mkdir: Permission denied: user=xxxx, access=WRITE, inode=
解决办法:
-
未开启kerberos的需要切换用户执行
sudo -u hdfs -
开启kerberos的需要切换到有对应权限的主体