Questions tagged [keytab]
110 questions
4
votes
2 answers
KrbException: Specified version of key is not available (44)
I've implemented kerberos authentication with SPNEGO using spring security.
Everything works fine on my computer.
I've used the exact keytab file and the krb5 configuration that worked on my computer and put it in the test environment.
Both…

Lior Chaga
- 1,424
- 2
- 21
- 35
3
votes
0 answers
How to Connect kafka consumer topic using keytab in python
I am new to Kafka and trying to read messages from kafka consumer topics using python. I am using below piece of code to read the messages.
from kafka import KafkaConsumer
topic = 'topic'
bootstrap_servers = 'server'
consumer =…

AK_sat
- 91
- 1
- 1
- 4
3
votes
1 answer
Kerberos auto update for "renew until"
Given with keywords like Kerberos "renew until" auto, doesn't find threads that can solve my problem, so posting here.
I create a keytab which contains following ticket lifetime info
Valid starting: 09/14/2018 13:05:01
Expires: 09/15/2018…

James Starks
- 31
- 1
- 3
3
votes
2 answers
Kerberos - AES-256 Keytab does not work
Our AD Team is going to disable RC4-HMAC so I have to change our JBoss-applications to AES.
I added the aes types to krb5.conf and created new keytabs but that seems to not work. Tests besides the application with kinit show the same results.
There…

Spezieh
- 154
- 1
- 2
- 8
3
votes
1 answer
Spark 1.6.Token can be issued only with kerberos or web authentication
I call kinit keytab right before spark-submit in my shell driver script. The thing is, its working by itself, but when I call the shell driver scrip it through Oozie, I got this error:
Stdoutput py4j.protocol.Py4JJavaError: An error occurred while…

la_femme_it
- 632
- 10
- 24
3
votes
1 answer
Read HDFS file in Spark Application in Kerberized Cluster
I setup a Hadoop Cluster with Hortonworks Data Platform 2.5, which also includes Ambari 2.4, Kerberos, Spark 1.6.2 and HDFS.
I have e.g. the Kerberos principals and keytabs for the following users:
spark (created by Ambari during Kerberos…

D. Müller
- 3,336
- 4
- 36
- 84
3
votes
2 answers
Connecting to Kerberrized HDFS , java.lang.IllegalArgumentException: Failed to specify server's Kerberos principal name;
I am trying to connect to a Kerberized hdfs cluster , with below code , with same below code i am able to access hbase ofcourse with HBaseConfiguration,
Configuration config = new Configuration();
config.set("hadoop.security.authentication",…

avinash patil
- 81
- 1
- 1
- 7
3
votes
1 answer
Kerberos keytab file contains multiple entries
I am trying to authenticate a user for my service using kerberos.
I attached SPN to a user using setspn -s HTTP/ .
Then I used ktpass command for the above SPN attached user. But the generated keytab file has multiple entries,…

user3106657
- 95
- 4
- 11
3
votes
0 answers
Kerberos java to hive keytab authentication, login failure UserGroupInformation.loginUserFromKeytab
I am trying to get kerberos keytab authentication work from java to Hive and not finding solution to fix the issue.
org.apache.hadoop.conf.Configuration conf = new
org.apache.hadoop.conf.Configuration();
…

joji
- 31
- 1
- 3
2
votes
2 answers
NTLM instead of Kerberos with Chrome version 69 when using alias in url
Since update to version 69.0.3497.81, kerberos authentication on our application doesn't work anymore. I don't master the authentification process but it seems that chrome use NTLM instead of Kerberos for authentication.
Access url to our…

Mathieu Detollenaere
- 61
- 1
- 7
2
votes
1 answer
Is it possible to reference a keytab from the classpath in jaas.conf?
Is it possible to reference a keytab from the classpath in jaas.conf?
I have tried the below, but nothing seems to work:
Client{
keyTab=classpath: /mykeytab.keytab
}
Client{
keyTab=file: /mykeytab.keytab
}
Client{
keyTab=file:…
user1870035
2
votes
1 answer
Check whether a Kerberos KeyTab file is valid in Java
I'm working on a Java code base that checks whether a Kerberos KeyTab file is valid, but it uses the internal class sun.security.krb5.internal.ktab.KeyTab for its isValid() method. Currently, it is doing the following:
File keytabFile = new…

haxney
- 3,358
- 4
- 30
- 31
2
votes
2 answers
Kerberos and multiple SPNs
I managed to setup Kerberos authentication for 1 server and is up and running ok. Now I have a project where I have to add another server to Kerberos configuration as follow:
1) AD server
2) server1 where service is running
3) server2 where same…

novak100
- 1,259
- 1
- 12
- 20
2
votes
1 answer
Spring security kerberos works with xml config but not with Java config
I tried the examples of spring security kerberos in with xml config then with java config. It's exactly the same config (one in xml, one in java).
When I use the project with xml config, it works.
However, when I use the project with java config, I…

rachelle
- 91
- 1
- 6
2
votes
1 answer
Is it possible to configure SPENGO irrespective of fully qualified host name
I have configured SPENGO for WebSphere and current SPENGO is working fine for fully qualified hostname say appserver.robo.com, I want a SPENGO configuration which can work for both
appserver.robo.com/productName as well as appserver/productName.
Is…

Technogix
- 77
- 13