Hi,
We have setup a single node cluster of DSE 3.0 Cassandra with Kerberos authentication.
Setup details are :-
i) Kerberos server (Ubuntu 12.0.4 32 bit)
ii) DSE Cassandra Node (Ubuntu 12.0.4 32 bit) , although 64 bit machine also didnt make any difference!
We can restart DSE cluster successfuly, and can connect to it via CQLSH client as well.
Now, from a separate machine (ubuntu 12.0.4 64 bit/32 bit), we are trying to connect this Cassandra node using a java client (Hector API) and getting exceptions(given at the last of this post).
Please help us!
Pom file (for your reference)
===================================================
<dependency>
<groupId>me.prettyprint</groupId>
<artifactId>hector-core</artifactId>
<version>1.0-5</version>
</dependency>
<dependency>
<groupId>org.apache.cassandra</groupId>
<artifactId>cassandra-all</artifactId>
<version>1.1.2</version>
</dependency>
<dependency>
<groupId>org.apache.thrift</groupId>
<artifactId>libthrift</artifactId>
<version>0.9.0</version>
</dependency>
===================================================
===================================================
Logs:-
2013-07-29 14:04:03,230 [main ] INFO SecuredThriftClientFactoryImpl - Kerberos V5 was enabled for client<->server communications.
2013-07-29 14:04:03,231 [main ] INFO SecuredThriftClientFactoryImpl - Properties:
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - sun.security.krb5.debug = true
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - java.security.auth.login.config = /home/dseuser/code/simple-client/src/main/resources/jaas.conf
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - java.security.krb5.conf = /home/dseuser/krb5.conf
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - kerberos.client.reference.name = client
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - kerberos.service.principal.name = dseuser
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - kerberos.client.principal.name = null
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - kerberos.client.password = null
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - javax.security.auth.useSubjectCredsOnly = true
2013-07-29 14:04:03,232 [main ] INFO SecuredThriftClientFactoryImpl - Trying to login to the KDC...
>>> KeyTabInputStream, readName(): BD.COM
>>> KeyTabInputStream, readName(): dseuser
>>> KeyTabInputStream, readName(): ubuntu-n205.bd.com
>>> KeyTab: load() entry length: 70; type: 23
>>> KeyTabInputStream, readName(): BD.COM
>>> KeyTabInputStream, readName(): dseuser
>>> KeyTabInputStream, readName(): ubuntu-n205.bd.com
>>> KeyTab: load() entry length: 78; type: 16
>>> KeyTabInputStream, readName(): BD.COM
>>> KeyTabInputStream, readName(): dseuser
>>> KeyTabInputStream, readName(): ubuntu-n205.bd.com
>>> KeyTab: load() entry length: 62; type: 1
>>> KeyTabInputStream, readName(): BD.COM
>>> KeyTabInputStream, readName(): HTTP
>>> KeyTabInputStream, readName(): ubuntu-n205.bd.com
>>> KeyTab: load() entry length: 66; type: 23
>>> KeyTabInputStream, readName(): BD.COM
>>> KeyTabInputStream, readName(): HTTP
>>> KeyTabInputStream, readName(): ubuntu-n205.bd.com
>>> KeyTab: load() entry length: 74; type: 16
>>> KeyTabInputStream, readName(): BD.COM
>>> KeyTabInputStream, readName(): HTTP
>>> KeyTabInputStream, readName(): ubuntu-n205.bd.com
>>> KeyTab: load() entry length: 58; type: 1
Added key: 1version: 2
Added key: 16version: 2
Added key: 23version: 2
Ordering keys wrt default_tkt_enctypes list
Using builtin default etypes for default_tkt_enctypes
default etypes for default_tkt_enctypes: 3 1 23 16 17.
>>> KdcAccessibility: reset
Using builtin default etypes for default_tkt_enctypes
default etypes for default_tkt_enctypes: 3 1 23 16 17.
>>> KrbAsReq calling createMessage
>>> KrbAsReq in createMessage
>>> KrbKdcReq send: kdc=slave2.BD.COM UDP:88, timeout=30000, number of retries =3, #bytes=157
>>> KDCCommunication: kdc=slave2.BD.COM UDP:88, timeout=30000,Attempt =1, #bytes=157
>>> KrbKdcReq send: #bytes read=277
>>> KrbKdcReq send: #bytes read=277
>>> KdcAccessibility: remove slave2.BD.COM
>>> KDCRep: init() encoding tag is 126 req type is 11
>>>KRBError:
cTime is Mon Jul 29 14:04:03 IST 2013 1375086843000
sTime is Mon Jul 29 14:03:04 IST 2013 1375086784000
suSec is 354460
error code is 25
error Message is Additional pre-authentication required
crealm is BD.COM
cname is dseuser/ubuntu-n205.bd.com
realm is BD.COM
sname is krbtgt/BD.COM
eData provided.
msgType is 30
>>>Pre-Authentication Data:
PA-DATA type = 136
>>>Pre-Authentication Data:
PA-DATA type = 11
PA-ETYPE-INFO etype = 23
PA-ETYPE-INFO salt = null
salt for 16 is null
>>>Pre-Authentication Data:
PA-DATA type = 19
PA-ETYPE-INFO2 etype = 23
PA-ETYPE-INFO2 salt = null
salt for 16 is null
>>>Pre-Authentication Data:
PA-DATA type = 2
PA-ENC-TIMESTAMP
>>>Pre-Authentication Data:
PA-DATA type = 133
KRBError received: NEEDED_PREAUTH
AcquireTGT: PREAUTH FAILED/REQUIRED, re-send AS-REQ
>>>KrbAsReq salt is BD.COMdseuserubuntu-n205.bd.com
Using builtin default etypes for default_tkt_enctypes
default etypes for default_tkt_enctypes: 3 1 23 16 17.
Pre-Authenticaton: find key for etype = 16
AS-REQ: Add PA_ENC_TIMESTAMP now
>>> EType: sun.security.krb5.internal.crypto.Des3CbcHmacSha1KdEType
>>> KrbAsReq calling createMessage
>>> KrbAsReq in createMessage
>>> KrbKdcReq send: kdc=slave2.BD.COM UDP:88, timeout=30000, number of retries =3, #bytes=248
>>> KDCCommunication: kdc=slave2.BD.COM UDP:88, timeout=30000,Attempt =1, #bytes=248
>>> KrbKdcReq send: #bytes read=634
>>> KrbKdcReq send: #bytes read=634
>>> KdcAccessibility: remove slave2.BD.COM
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>> KrbAsRep cons in KrbAsReq.getReply dseuser/ubuntu-n205.bd.com
2013-07-29 14:04:03,504 [main ] INFO SecuredThriftClientFactoryImpl - Kerberos authenticated successfully against KDC
2013-07-29 14:04:03,510 [main ] INFO CassandraHostRetryService - Downed Host Retry service started with queue size -1 and retry delay 10s
Found ticket for dseuser/ubuntu-n205.bd.com@BD.COM to go to krbtgt/BD.COM@BD.COM expiring on Tue Jul 30 00:03:04 IST 2013
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for dseuser/ubuntu-n205.bd.com@BD.COM to go to krbtgt/BD.COM@BD.COM expiring on Tue Jul 30 00:03:04 IST 2013
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 3 1 23 16 17.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>> KrbKdcReq send: kdc=slave2.BD.COM UDP:88, timeout=30000, number of retries =3, #bytes=660
>>> KDCCommunication: kdc=slave2.BD.COM UDP:88, timeout=30000,Attempt =1, #bytes=660
>>> KrbKdcReq send: #bytes read=620
>>> KrbKdcReq send: #bytes read=620
>>> KdcAccessibility: remove slave2.BD.COM
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>> KrbApReq: APOptions are 00100000 00000000 00000000 00000000
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
Krb5Context setting mySeqNumber to: 1015730961
Created InitSecContextToken:
0000: 01 00 6E 82 02 34 30 82 02 30 A0 03 02 01 05 A1 ..n..40..0......
0010: 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 01 ......... ......
0020: 49 61 82 01 45 30 82 01 41 A0 03 02 01 05 A1 08 Ia..E0..A.......
0030: 1B 06 42 44 2E 43 4F 4D A2 2A 30 28 A0 03 02 01 ..BD.COM.*0(....
0040: 00 A1 21 30 1F 1B 08 69 6D 70 61 64 6D 69 6E 1B ..!0...dseuser.
0050: 13 69 6D 70 65 74 75 73 2D 6E 32 30 35 2E 62 64 .ubuntu-n205.bd
0060: 2E 63 6F 6D A3 82 01 02 30 81 FF A0 03 02 01 17 .com....0.......
0070: A1 03 02 01 02 A2 81 F2 04 81 EF 24 2B 6D 73 D1 ...........$+ms.
0080: 42 E8 FC D9 39 37 7E 6C 46 A6 F8 F7 88 6C A4 83 B...97.lF....l..
0090: C4 5E A8 9D 6C DE D8 4D A7 30 20 40 A5 67 53 94 .^..l..M.0 @.gS.
00A0: 82 D5 66 6B 6A EA 22 7F 01 FE 41 0F 97 5D 29 36 ..fkj."...A..])6
00B0: 48 3E FB 76 91 BA 16 A5 07 A8 B5 B9 DB 5A 47 46 H>.v.........ZGF
00C0: 93 AE 81 00 6F 4A FA A7 62 C8 45 4E 2D 70 D7 22 ....oJ..b.EN-p."
00D0: 1F 0D D1 AA DE 0C 38 FE 0D D7 D4 01 B3 BB F1 A8 ......8.........
00E0: 35 6C EC 43 46 46 D5 15 43 66 50 DF 34 F9 36 64 5l.CFF..CfP.4.6d
00F0: C6 8A 34 C9 C0 7D AF 1F 5D 11 7D AA 0E DE 7E 4B ..4.....]......K
0100: 24 1C C2 ED 26 8D AE 5E C2 4D 2B 9B AC 37 79 32 $...&..^.M+..7y2
0110: 78 81 4F 8B 21 AB 3E DB 38 21 C0 F4 B0 16 9A 9D x.O.!.>.8!......
0120: D4 C8 EB E9 88 6D 19 08 9B 09 C6 B6 BB A0 00 ED .....m..........
0130: 69 11 82 DD 53 D3 A2 F2 A9 A7 58 D3 BF 95 81 83 i...S.....X.....
0140: 23 B1 88 30 BB 68 2C D2 D1 A9 96 CB 06 6C CC AC #..0.h,......l..
0150: 01 A4 31 2A 1D 63 16 A6 C5 38 08 3D 11 37 75 1B ..1*.c...8.=.7u.
0160: F1 EE 00 8B F7 C8 E1 35 C2 23 A4 81 CD 30 81 CA .......5.#...0..
0170: A0 03 02 01 17 A2 81 C2 04 81 BF BE 43 80 21 E3 ............C.!.
0180: 2A D7 46 A8 23 FD B7 19 0E 31 49 5F 1A F5 A7 BD *.F.#....1I_....
0190: 1C BF 5D C3 80 19 4E D7 86 17 AA C9 12 F1 5E 05 ..]...N.......^.
01A0: E9 50 D6 30 B6 A2 5D 28 2D 1F E2 50 26 0D 06 92 .P.0..](-..P&...
01B0: 6A 14 51 49 EC F9 4B DF 0D CE 04 DE 32 C2 78 7F j.QI..K.....2.x.
01C0: F4 81 7D 28 07 20 CB 9F 25 48 39 D0 CB 01 E2 84 ...(. ..%H9.....
01D0: FF A9 CA F0 0D FD 82 88 70 57 77 1E C1 93 49 38 ........pWw...I8
01E0: 1F E9 91 7B 92 02 05 FA 3B AC 37 41 A0 14 CE 92 ........;.7A....
01F0: 4C 9D D8 31 CA 5F CA A1 50 B0 AD C7 69 CF A3 34 L..1._..P...i..4
0200: 0C 79 33 A6 6A 24 4B 9C 5A AC 39 E3 60 79 83 57 .y3.j$K.Z.9.`y.W
0210: D7 07 91 DC 26 18 3E 84 16 46 7F B3 AE 87 F8 F0 ....&.>..F......
0220: EA B5 93 2E 47 0C E4 FA 0B 01 C3 B4 93 07 89 2C ....G..........,
0230: 28 90 7F 6F 9A 7A 6D 2E 8A 39 (..o.zm..9
2013-07-29 14:04:03,543 [main ] ERROR KerberosHelper - Unable to authenticate client against Kerberos
GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)
at sun.security.jgss.GSSHeader.<init>(GSSHeader.java:80)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:219)
at me.prettyprint.cassandra.connection.security.KerberosHelper$2.run(KerberosHelper.java:82)
at me.prettyprint.cassandra.connection.security.KerberosHelper$2.run(KerberosHelper.java:73)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:337)
at me.prettyprint.cassandra.connection.security.KerberosHelper.authenticateClient(KerberosHelper.java:73)
at me.prettyprint.cassandra.connection.client.HKerberosThriftClient.open(HKerberosThriftClient.java:85)
at me.prettyprint.cassandra.connection.client.HKerberosThriftClient.open(HKerberosThriftClient.java:24)
at me.prettyprint.cassandra.connection.ConcurrentHClientPool.createClient(ConcurrentHClientPool.java:147)
at me.prettyprint.cassandra.connection.ConcurrentHClientPool.<init>(ConcurrentHClientPool.java:53)
at me.prettyprint.cassandra.connection.RoundRobinBalancingPolicy.createConnection(RoundRobinBalancingPolicy.java:67)
at me.prettyprint.cassandra.connection.HConnectionManager.<init>(HConnectionManager.java:67)
at me.prettyprint.cassandra.service.AbstractCluster.<init>(AbstractCluster.java:67)
at me.prettyprint.cassandra.service.ThriftCluster.<init>(ThriftCluster.java:21)
at me.prettyprint.hector.api.factory.HFactory.createCluster(HFactory.java:197)
at me.prettyprint.hector.api.factory.HFactory.getOrCreateCluster(HFactory.java:144)
at com.example.cassandra.SimpleClient.main(SimpleClient.java:48)
2013-07-29 14:04:03,545 [main ] ERROR HConnectionManager - Could not start connection pool for host 192.168.213.53(192.168.213.53):9160
2013-07-29 14:04:03,545 [main ] INFO CassandraHostRetryService - Host detected as down was added to retry queue: 192.168.213.53(192.168.213.53):9160
Found ticket for dseuser/ubuntu-n205.bd.com@BD.COM to go to krbtgt/BD.COM@BD.COM expiring on Tue Jul 30 00:03:04 IST 2013
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for dseuser/ubuntu-n205.bd.com@BD.COM to go to krbtgt/BD.COM@BD.COM expiring on Tue Jul 30 00:03:04 IST 2013
Found ticket for dseuser/ubuntu-n205.bd.com@BD.COM to go to dseuser/ubuntu-n205.bd.com@BD.COM expiring on Tue Jul 30 00:03:04 IST 2013
Found service ticket in the subjectTicket (hex) =
0000: 61 82 01 45 30 82 01 41 A0 03 02 01 05 A1 08 1B a..E0..A........
0010: 06 42 44 2E 43 4F 4D A2 2A 30 28 A0 03 02 01 00 .BD.COM.*0(.....
0020: A1 21 30 1F 1B 08 69 6D 70 61 64 6D 69 6E 1B 13 .!0...dseuser..
0030: 69 6D 70 65 74 75 73 2D 6E 32 30 35 2E 62 64 2E ubuntu-n205.bd.
0040: 63 6F 6D A3 82 01 02 30 81 FF A0 03 02 01 17 A1 com....0........
0050: 03 02 01 02 A2 81 F2 04 81 EF 24 2B 6D 73 D1 42 ..........$+ms.B
0060: E8 FC D9 39 37 7E 6C 46 A6 F8 F7 88 6C A4 83 C4 ...97.lF....l...
0070: 5E A8 9D 6C DE D8 4D A7 30 20 40 A5 67 53 94 82 ^..l..M.0 @.gS..
0080: D5 66 6B 6A EA 22 7F 01 FE 41 0F 97 5D 29 36 48 .fkj."...A..])6H
0090: 3E FB 76 91 BA 16 A5 07 A8 B5 B9 DB 5A 47 46 93 >.v.........ZGF.
00A0: AE 81 00 6F 4A FA A7 62 C8 45 4E 2D 70 D7 22 1F ...oJ..b.EN-p.".
00B0: 0D D1 AA DE 0C 38 FE 0D D7 D4 01 B3 BB F1 A8 35 .....8.........5
00C0: 6C EC 43 46 46 D5 15 43 66 50 DF 34 F9 36 64 C6 l.CFF..CfP.4.6d.
00D0: 8A 34 C9 C0 7D AF 1F 5D 11 7D AA 0E DE 7E 4B 24 .4.....]......K$
00E0: 1C C2 ED 26 8D AE 5E C2 4D 2B 9B AC 37 79 32 78 ...&..^.M+..7y2x
00F0: 81 4F 8B 21 AB 3E DB 38 21 C0 F4 B0 16 9A 9D D4 .O.!.>.8!.......
0100: C8 EB E9 88 6D 19 08 9B 09 C6 B6 BB A0 00 ED 69 ....m..........i
0110: 11 82 DD 53 D3 A2 F2 A9 A7 58 D3 BF 95 81 83 23 ...S.....X.....#
0120: B1 88 30 BB 68 2C D2 D1 A9 96 CB 06 6C CC AC 01 ..0.h,......l...
0130: A4 31 2A 1D 63 16 A6 C5 38 08 3D 11 37 75 1B F1 .1*.c...8.=.7u..
0140: EE 00 8B F7 C8 E1 35 C2 23 ......5.#
Client Principal = dseuser/ubuntu-n205.bd.com@BD.COM
Server Principal = dseuser/ubuntu-n205.bd.com@BD.COM
Session Key = EncryptionKey: keyType=23 keyBytes (hex dump)=
0000: E2 0C A5 12 36 A5 BF 61 5D AB C4 2D B8 17 E4 89 ....6..a]..-....
Forwardable Ticket true
Forwarded Ticket false
Proxiable Ticket true
Proxy Ticket false
Postdated Ticket false
Renewable Ticket false
Initial Ticket false
Auth Time = Mon Jul 29 14:03:04 IST 2013
Start Time = Mon Jul 29 14:03:04 IST 2013
End Time = Tue Jul 30 00:03:04 IST 2013
Renew Till = null
Client Addresses Null
>>> KrbApReq: APOptions are 00100000 00000000 00000000 00000000
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
Krb5Context setting mySeqNumber to: 840922547
Created InitSecContextToken:
0000: 01 00 6E 82 02 34 30 82 02 30 A0 03 02 01 05 A1 ..n..40..0......
0010: 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 01 ......... ......
0020: 49 61 82 01 45 30 82 01 41 A0 03 02 01 05 A1 08 Ia..E0..A.......
0030: 1B 06 42 44 2E 43 4F 4D A2 2A 30 28 A0 03 02 01 ..BD.COM.*0(....
0040: 00 A1 21 30 1F 1B 08 69 6D 70 61 64 6D 69 6E 1B ..!0...dseuser.
0050: 13 69 6D 70 65 74 75 73 2D 6E 32 30 35 2E 62 64 .ubuntu-n205.bd
0060: 2E 63 6F 6D A3 82 01 02 30 81 FF A0 03 02 01 17 .com....0.......
0070: A1 03 02 01 02 A2 81 F2 04 81 EF 24 2B 6D 73 D1 ...........$+ms.
0080: 42 E8 FC D9 39 37 7E 6C 46 A6 F8 F7 88 6C A4 83 B...97.lF....l..
0090: C4 5E A8 9D 6C DE D8 4D A7 30 20 40 A5 67 53 94 .^..l..M.0 @.gS.
00A0: 82 D5 66 6B 6A EA 22 7F 01 FE 41 0F 97 5D 29 36 ..fkj."...A..])6
00B0: 48 3E FB 76 91 BA 16 A5 07 A8 B5 B9 DB 5A 47 46 H>.v.........ZGF
00C0: 93 AE 81 00 6F 4A FA A7 62 C8 45 4E 2D 70 D7 22 ....oJ..b.EN-p."
00D0: 1F 0D D1 AA DE 0C 38 FE 0D D7 D4 01 B3 BB F1 A8 ......8.........
00E0: 35 6C EC 43 46 46 D5 15 43 66 50 DF 34 F9 36 64 5l.CFF..CfP.4.6d
00F0: C6 8A 34 C9 C0 7D AF 1F 5D 11 7D AA 0E DE 7E 4B ..4.....]......K
0100: 24 1C C2 ED 26 8D AE 5E C2 4D 2B 9B AC 37 79 32 $...&..^.M+..7y2
0110: 78 81 4F 8B 21 AB 3E DB 38 21 C0 F4 B0 16 9A 9D x.O.!.>.8!......
0120: D4 C8 EB E9 88 6D 19 08 9B 09 C6 B6 BB A0 00 ED .....m..........
0130: 69 11 82 DD 53 D3 A2 F2 A9 A7 58 D3 BF 95 81 83 i...S.....X.....
0140: 23 B1 88 30 BB 68 2C D2 D1 A9 96 CB 06 6C CC AC #..0.h,......l..
0150: 01 A4 31 2A 1D 63 16 A6 C5 38 08 3D 11 37 75 1B ..1*.c...8.=.7u.
0160: F1 EE 00 8B F7 C8 E1 35 C2 23 A4 81 CD 30 81 CA .......5.#...0..
0170: A0 03 02 01 17 A2 81 C2 04 81 BF 09 B5 6D 59 B2 .............mY.
0180: 32 BE 85 C5 6A 57 0A B2 E2 8C 4F 4A 5D 76 CA 18 2...jW....OJ]v..
0190: DC F0 0F 83 C7 34 01 F4 0A B8 9C E5 81 3E EC 21 .....4.......>.!
01A0: EA 2C A4 71 07 36 19 76 96 03 85 77 ED 34 A4 63 .,.q.6.v...w.4.c
01B0: 65 D7 62 B2 12 FC 69 AC 76 67 08 7F 5D FB EA FA e.b...i.vg..]...
01C0: D5 B0 06 61 B5 00 63 DA 5A 5C F4 0D 12 37 3E 45 ...a..c.Z\...7>E
01D0: EA 74 00 F3 19 31 79 D5 F1 A5 BC 0C 5D A9 08 77 .t...1y.....]..w
01E0: 4F 48 7E 45 61 B4 A1 37 25 FA 2D B5 3B 90 90 FE OH.Ea..7%.-.;...
01F0: 5A 3E 40 87 08 BF F7 47 05 B3 14 DF FD DC 13 B8 Z>@....G........
0200: CB E4 9F 6B 28 C5 00 B2 16 BB 26 57 90 47 2B 03 ...k(.....&W.G+.
0210: D6 06 D6 EE 19 00 C2 E4 6F 70 B9 D2 81 13 16 09 ........op......
0220: 76 8F 64 DF 02 DB 52 86 15 6F FD F9 02 CE 26 02 v.d...R..o....&.
0230: 70 B0 21 97 FA DA F4 2A 2E 15 p.!....*..
2013-07-29 14:04:03,559 [tRetryService-1] ERROR KerberosHelper - Unable to authenticate client against Kerberos
GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)
at sun.security.jgss.GSSHeader.<init>(GSSHeader.java:80)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:219)
at me.prettyprint.cassandra.connection.security.KerberosHelper$2.run(KerberosHelper.java:82)
at me.prettyprint.cassandra.connection.security.KerberosHelper$2.run(KerberosHelper.java:73)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:337)
at me.prettyprint.cassandra.connection.security.KerberosHelper.authenticateClient(KerberosHelper.java:73)
at me.prettyprint.cassandra.connection.client.HKerberosThriftClient.open(HKerberosThriftClient.java:85)
at me.prettyprint.cassandra.connection.client.HKerberosThriftClient.open(HKerberosThriftClient.java:24)
at me.prettyprint.cassandra.connection.CassandraHostRetryService.verifyConnection(CassandraHostRetryService.java:209)
at me.prettyprint.cassandra.connection.CassandraHostRetryService.access$100(CassandraHostRetryService.java:24)
at me.prettyprint.cassandra.connection.CassandraHostRetryService$1.run(CassandraHostRetryService.java:75)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
at java.util.concurrent.FutureTask.run(FutureTask.java:138)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:98)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:206)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
2013-07-29 14:04:03,562 [tRetryService-1] WARN CassandraHostRetryService - Downed 192.168.213.53(192.168.213.53):9160 host still appears to be down: Kerberos context couldn't be established with client.
2013-07-29 14:04:03,576 [main ] INFO JmxMonitor - Registering JMX me.prettyprint.cassandra.service_Test Cluster:ServiceType=hector,MonitorType=hector
Exception in thread "main" me.prettyprint.hector.api.exceptions.HectorException: All host pools marked down. Retry burden pushed out to client.
at me.prettyprint.cassandra.connection.HConnectionManager.getClientFromLBPolicy(HConnectionManager.java:393)
at me.prettyprint.cassandra.connection.HConnectionManager.operateWithFailover(HConnectionManager.java:249)
at me.prettyprint.cassandra.service.AbstractCluster.describeClusterName(AbstractCluster.java:155)
at com.example.cassandra.SimpleClient.main(SimpleClient.java:52)
===================================================