hbase kerberos认证无法自动续约问题

关注

VIP免费原创最新推荐文章于 2026-08-06 13:36:24 发布 2.5k 阅读 AI 写同款· GEO 优化 ›

Ambari集成Kerberos 搭建ambari请参考我的上一篇博客：centos7安装Ambari 2.7.5 + HDP3.1.5 Kerberos搭建环境：首先时间一定要同步。节点 server：hadoop101 client：hadoop102 hadoop103 搭建Kerberos Server kdc服务器包含三个配置文件： # 集群上所有节点都有这个文件而且内容同步 /etc/krb5.conf # 主服务器上的kdc配置 /var/kerberos/krb5kdc/kdc.conf # 能够不直接访问 KDC 阅读详情

一、背景

服务运行一段时间后(大概7天)，hbase写入和读取报错，错误描述为：重试次数耗尽，原因是因为正在重新认证且失败了，不能接受请求。之前同事是使用crontab定时重启临时解决，自己刚好有空帮忙看看。

org.apache.hadoop.hbase.client.RetriesExhaustedException: Failed after attempts=2, exceptions:
Tue Feb 23 15:49:17 CST 2021, RpcRetryingCaller{
     
     globalStartTime=1614066557307, pause=100, maxAttempts=2}, javax.security.sasl.SaslException: Call to hadoopxxx8.xxx.com/192.168.xx.xx:16020 failed on local exception: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] [Caused by javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]]
Tue Feb 23 15:49:17 CST 2021, RpcRetryingCaller{
     
     globalStartTime=1614066557307, pause=100, maxAttempts=2}, java.io.IOException: Call to hadoopxxx.xxx.com/192.168.xx.xx:16020 failed on local exception: java.io.IOException: Can not send request because relogin is in progress.