Dvc kerberos ticket issue

Questions
1

Hi all, have a trouble with setting up dvc remote hdfs with kerberos ticket.
DVC version: 2.3.0 (pip)
According to the https://dvc.org/doc/command-reference/remote/modify
I added valid kerb_ticket - path to the Kerberos ticket cache for Kerberos-secured HDFS clusters

But have a following error during dvc push:
2021-06-22 12:42:07,580 DEBUG: Collecting information from remote cache…
2021-06-22 12:42:07,580 DEBUG: Querying 1 hashes via object_exists
0% Querying remote cache| |0/1 [00:00<?, ?file/s]
…
LoginException: Unable to obtain password from user
org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: *** using ticket cache file: FILE:/tmp/krb5cc_1030 javax.security.auth.login.LoginException: Unable to obtain password from user

python3.7/site-packages/dvc/fs/pool.py", line 54, in get_connection
return self._conn_func(*self._conn_args, **self._conn_kwargs)
File “pyarrow/_hdfs.pyx”, line 83, in pyarrow._hdfs.HadoopFileSystem.init
File “pyarrow/error.pxi”, line 141, in pyarrow.lib.pyarrow_internal_check_status
File “pyarrow/error.pxi”, line 112, in pyarrow.lib.check_status
OSError: HDFS connection failed

can anybody help to understand this error?
thanks!

2

Hi @damian

Based on some googling it looks like that kerberos error usually means that the process could not access the kerberos keytab file, or that the current user (kerberos principal) is not in the keytab. Can you double check that the user running dvc has the right permissions to access your keytab file?