kerberos_hadoop GSS initiate failed

安装部署过程参考Xiajc - 工作笔记 http://blog.chinaunix.net/uid-1838361-id-3243243.html

遇到的问题
2013-06-03 08:04:07,531 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:search/XXX-0525@for_hadoop (auth:KERBEROS) cause:javax.sec
urity.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - UNKN
OWN_SERVER)]
这个错误主要是由于票据时间错误所致，请确认一下几个地方的时间
1、定义申请认证的主机的票据和重新认证生命周期
/etc/krb5.conf
 ticket_lifetime = 1d
 renew_lifetime = 12d
2、在KDC中定义票据的票据和更新认证生命周期
kadmin.local:  getprinc search/ansible-master
Principal: search/ansible-master@for_hadoop
Expiration date: [never]
Last password change: Tue Jun 04 17:58:38 PDT 2013
Password expiration date: [none]
Maximum ticket life: 1 day 01:00:00
Maximum renewable life: 0 days 00:00:00
修改时间的方法：modprinc -maxrenewlife 7days -maxrenewlife 12d  search/ansible-master