TAC is not using the correct Kerberos ticket for the Hadoop connection

Problem Description

A Big Data Job, triggered from TAC and executed by JobServer, is looking for the ticket cache file path, /tmp/krb5aa_xxx. However, the expected path is /tmp/krb5aa_yyy.

 

Root Cause

In this case, the JobServer is owned by the Linux user, talenduser. If you don't specify the Linux user in Job Conductor for the Task/Job, the Job will be executed by the default user who owns the JobServer. If you log in to Linux using talenduser and use the klist command, the returned ticket cache file path is /tmp/krb5aa_xxx. The original expected Kerberos ticket cache file path is /tmp/krb5aa_yyy, which is owned by the Linux user root. Root is not the user running the Talend Job.

 

Solution

On the TAC Job Conductor page, specify the corresponding Linux user for the Job/Task who owns the expected Kerberos ticket cache file path, /tmp/krb5aa_yyy; or no change in TAC, but change the ownership between the expected Kerberos ticket cache file path and the Linux user.

Version history
Revision #:
5 of 5
Last update:
‎05-08-2019 11:49 AM
Updated by:
 
Contributors