title: Kerberos: check sum failed issue
body: <p>I am seeing the&quot; KrbException: Checksum failed&quot; Exception.
  Looks like kerberos issue but I am not able to figure out.</p>
  <p>Any pointers on how to resolve will be great!
  Thanks in advance.</p>
  <p>Machine details:</p>
  <h1>lsb_release -a</h1>
  <p>No LSB modules are available.
  Distributor ID: Ubuntu
  Description:    Ubuntu 12.04.4 LTS
  Release:    12.04</p>
  <h1>java -version</h1>
  <p>java version &quot;1.7.0_55&quot;
  OpenJDK Runtime Environment (IcedTea 2.4.7) (7u55-2.4.7-1ubuntu1~0.12.04.2)
  OpenJDK 64-Bit Server VM (build 24.51-b03, mixed mode)</p>
  <pre><code>2014-06-17 22:19:24,475 ERROR [pool-6-thread-198]: server.TThreadPoolServer (TThreadPoolServer.java:run(215)) - Error occurred during processing of message.
  java.lang.RuntimeException: org.apache.thrift.transport.TTransportException: GSS initiate failed
          at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:219)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge20S.java:676)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge20S.java:673)
          at java.security.AccessController.doPrivileged(Native Method)
          at javax.security.auth.Subject.doAs(Subject.java:356)
          at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1574)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge20S.java:673)
          at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:189)
          at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
          at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
          at java.lang.Thread.run(Thread.java:744)
  Caused by: org.apache.thrift.transport.TTransportException: GSS initiate failed
          at org.apache.thrift.transport.TSaslTransport.sendAndThrowMessage(TSaslTransport.java:221)
          at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:297)
          at org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41)
          at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216)
          ... 10 more
  2014-06-17 22:19:25,481 ERROR [pool-6-thread-198]: transport.TSaslTransport (TSaslTransport.java:open(296)) - SASL negotiation failure
  javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)]
          at com.sun.security.sasl.gsskerb.GssKrb5Server.evaluateResponse(GssKrb5Server.java:177)
          at org.apache.thrift.transport.TSaslTransport$SaslParticipant.evaluateChallengeOrResponse(TSaslTransport.java:509)
          at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:264)
          at org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41)
          at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge20S.java:676)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge20S.java:673)
          at java.security.AccessController.doPrivileged(Native Method)
          at javax.security.auth.Subject.doAs(Subject.java:356)
          at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1574)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge20S.java:673)
          at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:189)
          at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
          at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
          at java.lang.Thread.run(Thread.java:744)
  Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)
          at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:788)
          at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)
          at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
          at com.sun.security.sasl.gsskerb.GssKrb5Server.evaluateResponse(GssKrb5Server.java:155)
          ... 14 more
  Caused by: KrbException: Checksum failed
          at sun.security.krb5.internal.crypto.Des3CbcHmacSha1KdEType.decrypt(Des3CbcHmacSha1KdEType.java:96)
          at sun.security.krb5.internal.crypto.Des3CbcHmacSha1KdEType.decrypt(Des3CbcHmacSha1KdEType.java:88)
          at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:177)
          at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:278)
          at sun.security.krb5.KrbApReq.&lt;init&gt;(KrbApReq.java:144)
          at sun.security.jgss.krb5.InitSecContextToken.&lt;init&gt;(InitSecContextToken.java:108)
          at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:771)
          ... 17 more
  Caused by: java.security.GeneralSecurityException: Checksum failed
          at sun.security.krb5.internal.crypto.dk.DkCrypto.decrypt(DkCrypto.java:362)
          at sun.security.krb5.internal.crypto.Des3.decrypt(Des3.java:79)
          at sun.security.krb5.internal.crypto.Des3CbcHmacSha1KdEType.decrypt(Des3CbcHmacSha1KdEType.java:94)
          ... 23 more
  2014-06-17 22:19:25,482 ERROR [pool-6-thread-198]: server.TThreadPoolServer (TThreadPoolServer.java:run(215)) - Error occurred during processing of message.
  java.lang.RuntimeException: org.apache.thrift.transport.TTransportException: GSS initiate failed
          at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:219)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge20S.java:676)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge20S.java:673)
          at java.security.AccessController.doPrivileged(Native Method)
          at javax.security.auth.Subject.doAs(Subject.java:356)
          at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1574)
          at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge20S$Server$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge20S.java:673)
          at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:189)
          at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
          at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
          at java.lang.Thread.run(Thread.java:744)
  Caused by: org.apache.thrift.transport.TTransportException: GSS initiate failed
          at org.apache.thrift.transport.TSaslTransport.sendAndThrowMessage(TSaslTransport.java:221)
          at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:297)
          at org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41)
          at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216)
          ... 10 more
  </code></pre>