Hadoop集成Kerberos出现的问题

出错信息

[root@hadoop102 ~]# hadoop fs -ls /
2022-03-13 18:37:38,562 WARN ipc.Client: Exception encountered while connecting to the server : org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]
ls: DestHost:destPort hadoop102:8020 , LocalHost:localPort hadoop102/192.168.10.102:0. Failed on local exception: java.io.IOException: org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS]

用户主体已认证

[root@hadoop102 etc]# klist 
Ticket cache: KEYRING:persistent:0:krb_ccache_IsY3ea1
Default principal: hdfs/hadoop@EXAMPLE.COM

Valid starting       Expires              Service principal
2022-03-13T19:07:03  2022-03-14T19:07:03  krbtgt/EXAMPLE.COM@EXAMPLE.COM

后来网上查找了解决问题：

1. 将krb5.conf中的default_ccache_name = KEYRING:persistent:%{uid}注释掉
2. 执行 kdestroy
3. 重新执行kinit即可