Secure deployments typically fail because of the following errors:
No valid credential provided
GSS Initiate failed
Solution - No valid credential provided: If your
kinitutility is incorrectly configured, you see the following error message during secure deployment:Caused by: java.io.IoException: javax.security.SaslException:GSS Initiate failed (Caused by GSSException: Failed to find any Kerberos tgt)Locate the correct path for the kinit utility.
cd $Full_Path_To_KDC_Server which kinit
Open the
master-install-location/gsInstallergsInstaller.propertiesfile in edit mode.Replace the existing value for
kinitpathproperty with the value obtained in Step-1.Restart the installation process.
Solution - GSS Initiate failed:
If your keytab file configurations are incorrect, you should see the following error message during secure deployment:
Caused by: java.io.IoException: javax.security.SaslException:GSS Initiate failed (Caused by GSSException: Failed to find any Kerberos tgt)![[Note]](../common/images/admon/note.png)
Note The auxiliary script file
setupKerberos.shpushes all the keytabs under/tmpdirectory of each host in your cluster. You must ensure that thegsInstaller.propertiesreflects the correct values for the keytab properties.Open the
master-install-location/gsInstaller/gsInstaller.propertiesfile in edit mode and update the value forhdfsuser.headless.keytabandsmoke_test_user.headless.keytabproperties.Restart the installation process.
More specific issues for secure deployments are discussed here:

