Summary/Reported Issue
Queries against a kerberized source were returning the following error in the UI when running a query
The source [<source name>] is currently unavailable. Metadata is not accessible; please check node health (or external storage) and permissions.
Relevant Versions
All versions
Troubleshooting Steps
Review the executor server.log for the underlying "Caused by" error in the error stacktrace. In this instance the following error was seen:
Caused by: javax.security.auth.login.LoginException: KrbException: krb5.conf loading failed.
Cause
Misconfigured krb5.conf file. This may be invalid path, incorrect permissions, MS DOS control characters within the "krb5.conf"
Steps to Resolve
1. Check the conf/dremio-env for the location of the `krb5.conf` file, an example being:
DREMIO_JAVA_EXTRA_OPTS="-Djava.security.krb5.conf=/path/to/krb5.conf"
(default if not set: /etc/krb5.conf )
2. Check that the permissions on the "krb5.conf" allow read access by the dremio process owner. Typically 700 or 600 permissions are used.
3. Remove any special characters or Microsoft control characters from the "krb5.conf" . Control character can sometimes be introduced to files when opened by tools in the Windows operating system. A linux tool called "dos2unix" can be run against the "krb5.conf" to check and remove any such characters
$ dos2unix krb5.conf