关于hadoop+kerberos安全认证问题的报错GSS initiate failed 解决

STARTUP_MSG: Starting DataNode
STARTUP_MSG:   host = cucrz-6/192.168.20.206
STARTUP_MSG:   args = []
STARTUP_MSG:   version = 1.2.1
STARTUP_MSG:   build = https://svn.apache.org/repos/asf/hadoop/common/branches/branch-1.2 -r 1503152; compiled by 'mattf' on Mon Jul 22 15:23:09 PDT 2013
STARTUP_MSG:   java = 1.7.0_25
************************************************************/
2013-09-22 16:56:03,398 INFO org.apache.hadoop.metrics2.impl.MetricsConfig: loaded properties from hadoop-metrics2.properties
2013-09-22 16:56:03,407 INFO org.apache.hadoop.metrics2.impl.MetricsSourceAdapter: MBean for source MetricsSystem,sub=Stats registered.
2013-09-22 16:56:03,408 INFO org.apache.hadoop.metrics2.impl.MetricsSystemImpl: Scheduled snapshot period at 10 second(s).
2013-09-22 16:56:03,408 INFO org.apache.hadoop.metrics2.impl.MetricsSystemImpl: DataNode metrics system started
2013-09-22 16:56:03,568 INFO org.apache.hadoop.metrics2.impl.MetricsSourceAdapter: MBean for source ugi registered.
2013-09-22 16:56:03,821 INFO org.apache.hadoop.security.UserGroupInformation: Asked the TGT renewer thread to terminate
2013-09-22 16:56:04,164 INFO org.apache.hadoop.security.UserGroupInformation: Login successful for userhadoop/cucrz-6@for_hadoop using keytab file /usr/local/hadoop/app/hadoop-1.2.1/conf/hdfs.keytab
2013-09-22 16:56:04,354 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hadoop/cucrz-6@for_hadoop cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Clock skew too great (37) - PROCESS_TGS)]
2013-09-22 16:56:04,356 INFO org.apache.hadoop.security.UserGroupInformation: Initiating logout forhadoop/cucrz-6@for_hadoop
2013-09-22 16:56:04,356 INFO org.apache.hadoop.security.UserGroupInformation: Initiating re-login forhadoop/cucrz-6@for_hadoop
2013-09-22 16:56:06,121 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hadoop/cucrz-6@for_hadoop cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Clock skew too great (37) - PROCESS_TGS)]
2013-09-22 16:56:06,121 WARN org.apache.hadoop.security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 600 seconds before.
2013-09-22 16:56:09,476 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hadoop/cucrz-6@for_hadoop cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Clock skew too great (37) - PROCESS_TGS)]
2013-09-22 16:56:09,477 WARN org.apache.hadoop.security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 600 seconds before.
2013-09-22 16:56:11,890 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hadoop/cucrz-6@for_hadoop cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Clock skew too great (37) - PROCESS_TGS)]
2013-09-22 16:56:11,890 WARN org.apache.hadoop.security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 600 seconds before.
2013-09-22 16:56:12,709 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hadoop/cucrz-6@for_hadoop cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Clock skew too great (37) - PROCESS_TGS)]
2013-09-22 16:56:12,710 WARN org.apache.hadoop.security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 600 seconds before.
2013-09-22 16:56:12,986 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hadoop/cucrz-6@for_hadoop cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Clock skew too great (37) - PROCESS_TGS)]
2013-09-22 16:56:12,987 WARN org.apache.hadoop.security.UserGroupInformation: Not attempting to re-login since the last re-login was attempted less than 600 seconds before.
2013-09-22 16:56:14,839 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hadoop/cucrz-6@for_hadoop cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Clock skew too great (37) - PROCESS_TGS)]

 

 

 

解决如下：

1）查看你的jsvc是否安装好

2）查看你hadoop主机所以时间日期是否同步一样

3）：在KDC中定义票据的票据和更新认证生命周期
kadmin.local:  getprinc search/ansible-master
Principal: search/ansible-master@for_hadoop
Expiration date: [never]
Last password change: Tue Jun 04 17:58:38 PDT 2013
Password expiration date: [none]
Maximum ticket life: 1 day 01:00:00
Maximum renewable life: 0 days 00:00:00
修改时间的方法：modprinc -maxrenewlife 7days  hadoop/cucrz-6@for_hadoop