Hortonworks.com
  • Explore
    • All Tags
    • All Questions
    • All Repos
    • All Repos
    • All SKB
    • All SKB
    • All Articles
    • All Ideas
    • All Articles
    • All Ideas
    • All Users
    • All Badges
    • Leaderboard
  • Create
    • Ask a question
    • Add Repo
    • Add Repo
    • Create Article
    • Post Idea
    • Create Article
    • Post Idea
  • Tracks
    • All Tracks
    • Community Help
    • Cloud & Operations
    • CyberSecurity
    • Data Ingestion & Streaming
    • Data Processing
    • Data Science & Advanced Analytics
    • Design & Architecture
    • Governance & Lifecycle
    • Hadoop Core
    • Sandbox & Learning
    • Security
    • Solutions
  • Login
HCC Hortonworks Community Connection
  • Home /
  • Solutions /
  • Home /
  • Solutions /
avatar image

Error: "org.apache.hadoop.yarn.exceptions.YarnException: Failed to submit application_1507005257029_0001 to YARN : Failed to renew token: Kind: kms-dt" occurs during Service check on a cluster using Kerberos and Ranger

tsokorai created · Dec 20, 2017 at 05:30 PM
0

SupportKB

Problem Description:
On a cluster using Kerberos and Ranger, service checks fail on Ambari. For example, a YARN service check fails the following error:

17/10/03 04:34:40 FATAL distributedshell.Client: Error running Client
org.apache.hadoop.yarn.exceptions.YarnException: Failed to submit application_1507005257029_0001 
to YARN : Failed to renew token: Kind: kms-dt, Service: 172.27.62.39:9292, Ident: 
00 2c 61 6d 62 61 72 69 2d 71 61 2d 63 6f 6d 63 61 73 74 64 72 63 6c 75 73 74 65 72 
40 43 41 42 4c 45 2e 43 4f 4d 43 41 53 54 2e 43 4f 4d 1a 72 6d 2f 5f 48 4f 53 54 40 
43 41 42 4c 45 2e 43 4f 4d 43 41 53 54 2e 43 4f 4d 00 8a 01 5e e0 83 af 15 8a 01 5f 
04 90 33 15 0e 02
at org.apache.hadoop.yarn.client.api.impl.YarnClientImpl.submitApplication
(YarnClientImpl.java:271)
at org.apache.hadoop.yarn.applications.distributedshell.Client.run(Client.java:708)
at org.apache.hadoop.yarn.applications.distributedshell.Client.main(Client.java:215)

Cause:
This issue occurs when the URL on ranger.plugin.kms.policy.rest.url points to an incorrect location or has a trailing "/".
Solution:
To resolve this issue, ensure the KMS URL is correct in Ambari > Ranger KMS > Advanced ranger-kms-security > ranger.plugin.kms.policy.rest.url and also remove tailing "/' if there is any.
 

About:
This article created by Hortonworks Support (Article: 000006764) on 2017-12-20 09:16
OS: Windows, Linux
Type: Configuration
Version: HDP

Support ID: 000006764
thub.nodes.view.add-new-comment
solutionhwsupportAmbariRanger
Add comment
10 |6000 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Follow

Follow

avatar image avatar image avatar image avatar image avatar image
avatar image avatar image avatar image avatar image avatar image
avatar image avatar image avatar image avatar image avatar image
avatar image avatar image avatar image avatar image avatar image
avatar image avatar image avatar image avatar image avatar image

Related posts

Ranger audit logs refers to access denied for HTTP user accessing YARN default queue

"error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery" occurs during the HDP rolling upgrade

ERROR"Required config(s): hbase-logsearch-conf is(are) not available for service HBASE with service config version 22 in cluster rasm" when starting Ambari server after upgrading to Ambari 2.5.0.3

From which version does Ranger support using of Ambari Infra Solr?

"Caused by: java.nio.channels.ClosedChannelException" Ranger tagsync fails to sync tags from Atlas

Ranger audit log timestamp is not correct

"org.postgresql.util.PSQLException: ERROR: schema "ambari_tests" does not exist" when running the "ambari-server upgrade" command

ERROR:"ImportError: cannot import name wait_for_port_opened" when upgrading an Ambari Server

How to add Java command line argument to specific Hive components through Ambari?

The Service configs resets to default when restarting Ambari after upgrading to Ambari 2.6.x

HCC Guidelines | HCC FAQs | HCC Privacy Policy

Hortonworks - Develops, Distributes and Supports Open Enterprise Hadoop.

© 2011-2017 Hortonworks Inc. All Rights Reserved.
Hadoop, Falcon, Atlas, Sqoop, Flume, Kafka, Pig, Hive, HBase, Accumulo, Storm, Solr, Spark, Ranger, Knox, Ambari, ZooKeeper, Oozie and the Hadoop elephant logo are trademarks of the Apache Software Foundation.
Privacy Policy | Terms of Service

HCC Guidelines | HCC FAQs | HCC Privacy Policy | Privacy Policy | Terms of Service

© 2011-2018 Hortonworks Inc. All Rights Reserved.

Hadoop, Falcon, Atlas, Sqoop, Flume, Kafka, Pig, Hive, HBase, Accumulo, Storm, Solr, Spark, Ranger, Knox, Ambari, ZooKeeper, Oozie and the Hadoop elephant logo are trademarks of the Apache Software Foundation.

  • Anonymous
  • Login
  • Create
  • Ask a question
  • Add Repo
  • Add Repo
  • Create SupportKB
  • Create SupportKB
  • Create Article
  • Post Idea
  • Create Article
  • Post Idea
  • Tracks
  • Community Help
  • Cloud & Operations
  • CyberSecurity
  • Data Ingestion & Streaming
  • Data Processing
  • Data Science & Advanced Analytics
  • Design & Architecture
  • Governance & Lifecycle
  • Hadoop Core
  • Sandbox & Learning
  • Security
  • Solutions
  • Explore
  • All Tags
  • All Questions
  • All Repos
  • All Repos
  • All SKB
  • All SKB
  • All Articles
  • All Ideas
  • All Articles
  • All Ideas
  • All Users
  • Leaderboard
  • All Badges