不支持/启用具有HMAC SHA1-96的加密类型AES256 CTS模式

时间:2016-10-24 06:54:51

标签: azure hadoop kerberos

我正在尝试使用Azure域服务在Azure中配置hadoop伪节点安全集群(以确保正常工作)。

操作系统 - Windows Server 2012 R2数据中心
Hadoop版本 - 2.7.2

我可以运行

hadoop fs -ls /

示例MapReduce作业正常

yarn jar %HADOOP_HOME%\share\hadoop\mapreduce\hadoop-mapreduce-examples-*.jar pi 16 10000

但是当我跑的时候, hdfs fsck /

它给出了,

Connecting to namenode via https://node1:50470/fsck?ugi=Kumar&path=%2F
Exception in thread "main" java.io.IOException: org.apache.hadoop.security.authentication.client.AuthenticationException:     Authentication failed, status: 403, message: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos credentails)
    at org.apache.hadoop.hdfs.tools.DFSck.doWork(DFSck.java:335)
    at org.apache.hadoop.hdfs.tools.DFSck.access$000(DFSck.java:73)
    at org.apache.hadoop.hdfs.tools.DFSck$1.run(DFSck.java:152)
    at org.apache.hadoop.hdfs.tools.DFSck$1.run(DFSck.java:149)
    at java.security.AccessController.doPrivileged(Native Method)
    at javax.security.auth.Subject.doAs(Subject.java:415)
    at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
    at org.apache.hadoop.hdfs.tools.DFSck.run(DFSck.java:148)
    at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:70)
    at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:84)
    at org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:377)
Caused by: org.apache.hadoop.security.authentication.client.AuthenticationException: Authentication failed, status: 403, message: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos credentails)
    at org.apache.hadoop.security.authentication.client.AuthenticatedURL.extractToken(AuthenticatedURL.java:274)
    at org.apache.hadoop.security.authentication.client.PseudoAuthenticator.authenticate(PseudoAuthenticator.java:77)
    at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:214)
    at org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:215)
    at org.apache.hadoop.hdfs.web.URLConnectionFactory.openConnection(URLConnectionFactory.java:161)
    at org.apache.hadoop.hdfs.tools.DFSck.doWork(DFSck.java:333)
    ... 10 more

当我访问namenode web ui时,它会显示

GSSException: Failure unspecified at GSS-API level (Mechanism level: Encryption type AES256 CTS mode with HMAC SHA1-96 is not supported/enabled)

但是相同的配置在Local Windows Active Directory

中工作正常

有人帮助我解决此错误并使其成功运行。

0 个答案:

没有答案