路过的高手大牛过来帮帮忙关于hadoop+kerberos的问题

[tsxzscj]

小弟最近在整合kerberos+hadoop，启动hadoop发现报错如下：

14/04/04 22:40:15 INFO http.HttpServer: Jetty bound to port 50070
14/04/04 22:40:15 INFO mortbay.log: jetty-6.1.26
14/04/04 22:40:15 INFO server.KerberosAuthenticationHandler: Login using keytab /etc/security/keytabs/hdfs.keytab, for principal ${dfs.web.authentication.kerberos.principal}
14/04/04 22:40:15 WARN mortbay.log: failed SpnegoFilter: javax.servlet.ServletException: javax.security.auth.login.LoginException: Unable to obtain password from user

14/04/04 22:40:15 WARN mortbay.log: Failed startup of context org.mortbay.jetty.webapp.WebAppContext@10d4f27{/,file:/workarea/hadoop-2.2.0/share/hadoop/hdfs/webapps/hdfs}
javax.servlet.ServletException: javax.security.auth.login.LoginException: Unable to obtain password from user

	at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:203)
	at org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:146)
	at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:97)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:713)
	at org.mortbay.jetty.servlet.Context.startContext(Context.java:140)
	at org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1282)
	at org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:518)
	at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:499)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.handler.HandlerCollection.doStart(HandlerCollection.java:152)
	at org.mortbay.jetty.handler.ContextHandlerCollection.doStart(ContextHandlerCollection.java:156)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:130)
	at org.mortbay.jetty.Server.doStart(Server.java:224)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.apache.hadoop.http.HttpServer.start(HttpServer.java:688)
	at org.apache.hadoop.hdfs.server.namenode.NameNodeHttpServer.start(NameNodeHttpServer.java:153)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.startHttpServer(NameNode.java:626)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:488)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:684)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:669)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1254)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNode.java:1320)

……

14/04/04 22:40:15 INFO mortbay.log: Started SelectChannelConnector@0.0.0.0:50070
14/04/04 22:40:15 INFO mortbay.log: Stopped SelectChannelConnector@0.0.0.0:50070
14/04/04 22:40:15 INFO impl.MetricsSystemImpl: Stopping NameNode metrics system...
14/04/04 22:40:15 INFO impl.MetricsSystemImpl: NameNode metrics system stopped.
14/04/04 22:40:15 INFO impl.MetricsSystemImpl: NameNode metrics system shutdown complete.
14/04/04 22:40:15 FATAL namenode.NameNode: Exception in namenode join
java.io.IOException: Unable to initialize WebAppContext
	at org.apache.hadoop.http.HttpServer.start(HttpServer.java:710)
	at org.apache.hadoop.hdfs.server.namenode.NameNodeHttpServer.start(NameNodeHttpServer.java:153)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.startHttpServer(NameNode.java:626)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:488)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:684)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:669)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1254)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNode.java:1320)
Caused by: javax.servlet.ServletException: javax.security.auth.login.LoginException: Unable to obtain password from user

	at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:203)
	at org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:146)
	at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:97)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:713)
	at org.mortbay.jetty.servlet.Context.startContext(Context.java:140)
	at org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1282)
	at org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:518)
	at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:499)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.handler.HandlerCollection.doStart(HandlerCollection.java:152)
	at org.mortbay.jetty.handler.ContextHandlerCollection.doStart(ContextHandlerCollection.java:156)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:130)
	at org.mortbay.jetty.Server.doStart(Server.java:224)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.apache.hadoop.http.HttpServer.start(HttpServer.java:688)
	... 7 more

……

14/04/04 22:40:15 INFO util.ExitUtil: Exiting with status 1
14/04/04 22:40:15 INFO namenode.NameNode: SHUTDOWN_MSG: 
/************************************************************
SHUTDOWN_MSG: Shutting down NameNode at k01/172.17.40.250
************************************************************/

[tsxzscj]

大湿来帮忙呀

[cat_yan]

javax.security.auth.login.loginexception：无法获取密码？？ root用户用useradd加个普通用户提示：useradd: unable to open password file。 普通用户su root提示：密码错（我可以肯定密码是对了）。 解决办法： 1.首先检查下面四个文件是否加了权限保护 [root@203 etc]# lsattr /etc/passwd ------------- /etc/passwd [root@203 etc]# lsattr /etc/shadow ----i-------- /etc/shadow [root@203 etc]# lsattr /etc/gshadow ------------- /etc/gshadow [root@203 etc]# lsattr /etc/group ----i-------- /etc/group 从结果来看/etc/shadow 和 /etc/group都加了保护。下一步就是去除保护 2.删除文件保护 [root@203 etc]# chattr -i /etc/shadow [root@203 etc]# lsattr /etc/shadow ------------- /etc/shadow [root@203 etc]# chattr -i /etc/group [root@203 etc]# lsattr /etc/group ------------- /etc/group 3.添加用户试试 [root@203 etc]# useradd huangf [root@203 etc]# passwd huangf Changing password for user huangf. New UNIX password: BAD PASSWORD: it is too simplistic/systematic Retype new UNIX password: passwd: all authentication tokens updated successfully. 添加用户成功了！！！！！

[tsxzscj]

求助，别沉了

[浮生(FS)]

发现在这个板块沉不了~~~

[dunerunner]

不建议使用hadoop+kerberos控制权限

[刘爱贵]

这个问题有解了吗？我也碰到相同问题了

[iamChirs]

你仔细看看LOG， 明明是login 使用keytab的时候找不到用户，你把keytab重新弄一下就好了。

[chen_bing]

5楼，为什么说不建议使用hadoop+kerberos,那你有好的安全构架？？

[chen_bing]

引用 5 楼 dunerunner 的回复:

不建议使用hadoop+kerberos控制权限

你不这么建议，那请问下，你建议用什么来控制权限？

[Mr's zhao]

为什么没人能解决呢

[dunerunner]

引用 9 楼 chen_bing的回复:

[quote=引用 5 楼 dunerunner 的回复:] 不建议使用hadoop+kerberos控制权限

你不这么建议，那请问下，你建议用什么来控制权限？[/quote] 那你给楼主解决一下啊

[liu312018859]

我也遇见这个问题，做了好久没有解决