hdfs安装kerberos的遇到问题总结

1.报文乱码 加密

答：修改配置文件 core-site.xml的 这个是加密传输的

<property>
<name>hadoop.rpc.protection</name>

<value>privacy</value> 
</property>

2.namenod not -format 

答案：core-site.xml和hdfs-site.xml配置一定要仔细观察

3. Couldn't setup connection for had2@TORRR.COM to hadoop1/10.7.240.61:8020; Host Details : local host is: "hadoop2/10.7.240.62"; destination host is: "hadoop1":8020;

答案：

4.kinit: Permission denied while getting initial credentials

答案：kinit root/admin@ITCAST.CNK

klist然后kadmin 

添加账号：addprinc -randkey nn/hadoop1.itcast.cn@ITCAST.CN 随机生产密码 

addprinc -pw 123456 nn/hadoop1.itcast.cn@ITCAST.CN (user)

ktadd -k /etc/security/keytables/nn.service.keytab  -norandkey user 给用户添加keytab注意keytab就是ticket可以直接认证 的

客户端 认证的命令 kinit -kt /opt/security/keytabs/nn.service.keytab nn /hadoop1@ITCAST.CN

5.chown: changing ownership of '/pp': User root is not a super user (non-super user cannot change owner).

答案：1.groupadd supergroup 2.usermod -a -G supergroup yarn

(3).su -hdfs -s /bin/bash -c "hadoop dfsadmin -refreshUser ToGroupsMappings"

6.User null does not belong to hadoop

原因主机没有创建此用户 在主机上运行

adduser gdmp 

usermod -G hadoop gdmp

usermod -a -G hdfs gdmp  

显示：usermod: group 'hdfs' does not exist 

groupadd hdfs