Product Documentation
Abstract
In Kerberized IOP clusters, admin may encounter the GSSException error when running HDFS commands such as the manual steps required when enabling NameNode HA in Ambari. The exception is caused by the NameNode Kerberos ticket expiration. The ticket needs to be renewed in order for those commands to work.
Content
To resolve the GSSException error, the admin basically needs to renew the NameNode Kerberos ticket first before executing the failed commands again.
To renew the Kerberos ticket, log on to the NameNode host as root, then issue the following command with the proper replacement tokens for <HOST> and <REALM>:
sudo su -l <HDFS_USER> -c 'kinit -kt /etc/security/keytabs/nn.service.keytab nn/<HOSTNAME>@<REALM>'
Once the ticket is renewed, re-execute the problem HDFS command, such as this manual step, from NameNode HA enabling:
sudo su -l <HDFS_USER> -c 'hdfs dfsadmin -safemode enter'
The command should be successful.
Original Publication Date
26 July 2016
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
26 September 2022
UID
swg27048469