Error: "org.apache.hadoop.yarn.exceptions.YarnException: Failed to submit application_1507005257029_0001 to YARN : Failed to renew token: Kind: kms-dt" occurs during Service check on a cluster using Kerberos and Ranger

SupportKB

Problem Description:
On a cluster using Kerberos and Ranger, service checks fail on Ambari. For example, a YARN service check fails the following error:

17/10/03 04:34:40 FATAL distributedshell.Client: Error running Client
org.apache.hadoop.yarn.exceptions.YarnException: Failed to submit application_1507005257029_0001 
to YARN : Failed to renew token: Kind: kms-dt, Service: 172.27.62.39:9292, Ident: 
00 2c 61 6d 62 61 72 69 2d 71 61 2d 63 6f 6d 63 61 73 74 64 72 63 6c 75 73 74 65 72 
40 43 41 42 4c 45 2e 43 4f 4d 43 41 53 54 2e 43 4f 4d 1a 72 6d 2f 5f 48 4f 53 54 40 
43 41 42 4c 45 2e 43 4f 4d 43 41 53 54 2e 43 4f 4d 00 8a 01 5e e0 83 af 15 8a 01 5f 
04 90 33 15 0e 02
at org.apache.hadoop.yarn.client.api.impl.YarnClientImpl.submitApplication
(YarnClientImpl.java:271)
at org.apache.hadoop.yarn.applications.distributedshell.Client.run(Client.java:708)
at org.apache.hadoop.yarn.applications.distributedshell.Client.main(Client.java:215)

Cause:
This issue occurs when the URL on ranger.plugin.kms.policy.rest.url points to an incorrect location or has a trailing "/".
Solution:
To resolve this issue, ensure the KMS URL is correct in Ambari > Ranger KMS > Advanced ranger-kms-security > ranger.plugin.kms.policy.rest.url and also remove tailing "/' if there is any.
 

About:
This article created by Hortonworks Support (Article: 000006764) on 2017-12-20 09:16
OS: Windows, Linux
Type: Configuration
Version: HDP