You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@nifi.apache.org by DEHAY Aurelien <au...@faurecia.com> on 2019/06/25 13:50:31 UTC
PutKudu and Kerberos issue at token renewal
Hello.
I got this error in app log:
I'm using a keytab for a nifi service my cluster. When I restart the PutKudu processor, it works again, until next renewal.
Anything I can do? Thanks;
2019-06-24 10:03:46,220 WARN [New I/O worker #796] org.apache.kudu.client.SecurityContext Caller-provided Subject has a Kerberos ticket that is about to expire. Kudu expects the application to renew or re-acquire its own tickets before expiration.
2019-06-24 10:03:46,220 INFO [New I/O worker #796] org.apache.kudu.client.ConnectToCluster Unable to connect to master par01prdmgt1.soft.fau:7051: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials
2019-06-24 10:03:46,220 INFO [New I/O worker #797] org.apache.kudu.client.ConnectToCluster Unable to connect to master par01prdmgt2.soft.fau:7051: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials
2019-06-24 10:03:46,221 INFO [New I/O worker #798] org.apache.kudu.client.ConnectToCluster Unable to connect to master par01prdmgt3.soft.fau:7051: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials
2019-06-24 10:03:46,222 ERROR [Timer-Driven Process Thread-83] org.apache.nifi.processors.kudu.PutKudu PutKudu[id=2bf04b42-016b-1000-0000-0000543223e3] Failed to write due to Row error for primary key="5d1083e0cc0558c142f6befe\x00\x002019-06-24T08:03:44.775Z", tablet=null, server=null, status=Not authorized: cannot re-acquire authentication token after 5 attempts (Couldn't find a valid master in (par01prdmgt1.soft.fau:7051,par01prdmgt2.soft.fau:7051,par01prdmgt3.soft.fau:7051). Exceptions received: [org.apache.kudu.client.NonRecoverableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials, org.apache.kudu.client.NonRecoverableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials, org.apache.kudu.client.NonRecoverableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials])
2019-06-24 10:03:48,258 INFO [New I/O worker #800] org.apache.kudu.client.ConnectToCluster Unable to connect to master par01prdmgt1.soft.fau:7051: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials
2019-06-24 10:03:48,258 INFO [New I/O worker #801] org.apache.kudu.client.ConnectToCluster Unable to connect to master par01prdmgt2.soft.fau:7051: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials
2019-06-24 10:03:48,258 INFO [New I/O worker #802] org.apache.kudu.client.ConnectToCluster Unable to connect to master par01prdmgt3.soft.fau:7051: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials
2019-06-24 10:03:48,259 WARN [New I/O worker #802] org.apache.kudu.client.AsyncKuduSession unexpected tablet lookup failure for operation KuduRpc(method=Write, tablet=null, attempt=0, DeadlineTracker(timeout=0, elapsed=10), No traces)
org.apache.kudu.client.NonRecoverableException: cannot re-acquire authentication token after 5 attempts (Couldn't find a valid master in (par01prdmgt1.soft.fau:7051,par01prdmgt2.soft.fau:7051,par01prdmgt3.soft.fau:7051). Exceptions received: [org.apache.kudu.client.NonRecoverableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials, org.apache.kudu.client.NonRecoverableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials, org.apache.kudu.client.NonRecoverableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials])
at org.apache.kudu.client.AuthnTokenReacquirer$1NewAuthnTokenErrB.call(AuthnTokenReacquirer.java:158)
at org.apache.kudu.client.AuthnTokenReacquirer$1NewAuthnTokenErrB.call(AuthnTokenReacquirer.java:141)
at com.stumbleupon.async.Deferred.doCall(Deferred.java:1280)
at com.stumbleupon.async.Deferred.runCallbacks(Deferred.java:1259)
at com.stumbleupon.async.Deferred.callback(Deferred.java:1002)
at org.apache.kudu.client.ConnectToCluster.incrementCountAndCheckExhausted(ConnectToCluster.java:246)
at org.apache.kudu.client.ConnectToCluster.access$100(ConnectToCluster.java:49)
at org.apache.kudu.client.ConnectToCluster$ConnectToMasterErrCB.call(ConnectToCluster.java:365)
at org.apache.kudu.client.ConnectToCluster$ConnectToMasterErrCB.call(ConnectToCluster.java:354)
at com.stumbleupon.async.Deferred.doCall(Deferred.java:1280)
at com.stumbleupon.async.Deferred.runCallbacks(Deferred.java:1259)
at com.stumbleupon.async.Deferred.handleContinuation(Deferred.java:1315)
at com.stumbleupon.async.Deferred.doCall(Deferred.java:1286)
at com.stumbleupon.async.Deferred.runCallbacks(Deferred.java:1259)
at com.stumbleupon.async.Deferred.callback(Deferred.java:1002)
at org.apache.kudu.client.KuduRpc.handleCallback(KuduRpc.java:246)
at org.apache.kudu.client.KuduRpc.errback(KuduRpc.java:300)
at org.apache.kudu.client.RpcProxy.responseReceived(RpcProxy.java:221)
at org.apache.kudu.client.RpcProxy.access$000(RpcProxy.java:60)
at org.apache.kudu.client.RpcProxy$1.call(RpcProxy.java:132)
at org.apache.kudu.client.RpcProxy$1.call(RpcProxy.java:128)
at org.apache.kudu.client.Connection.cleanup(Connection.java:715)
at org.apache.kudu.client.Connection.exceptionCaught(Connection.java:460)
at org.apache.kudu.shaded.org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:112)
at org.apache.kudu.client.Connection.handleUpstream(Connection.java:244)
Aurélien DEHAY
Big Data Architect
+33 616 815 441
aurelien.dehay@faurecia.com<ma...@faurecia.com>
23/27 avenue des Champs Pierreux
92735 Nanterre Cedex - France
[Faurecia_inspiring_mobility_logo-RVB_150]
This electronic transmission (and any attachments thereto) is intended solely for the use of the addressee(s). It may contain confidential or legally privileged information. If you are not the intended recipient of this message, you must delete it immediately and notify the sender. Any unauthorized use or disclosure of this message is strictly prohibited. Faurecia does not guarantee the integrity of this transmission and shall therefore never be liable if the message is altered or falsified nor for any virus, interception or damage to your system.