在上一篇文章《kylin Unable to login, please check your username/password.》中，提到，如果cdh的配置文件发生了更新，而kylin没有重启，导致账户密码不对。
最近集群没有重启，依然出现账户名密码无法连接的情况，原来默认的管理员账户可以访问但是新增加的ANALYST账户无法访问，排查日志根本什么都看不到，如下为kylin日志
如果服务重启，应用就能恢复。
2019-09-16 21:38:01,808 DEBUG [http-bio-7070-exec-7] security.KylinAuthenticationProvider:57 : User cache [45, -40, 120, -36, -13, 32, -125, 5, -74, -81, -88, -58, 82, -46, -13, -98] is removed due to EXPLICIT 2019-09-16 21:38:01,917 DEBUG [http-bio-7070-exec-7] security.KylinAuthenticationProvider:113 : User ANALYST authorities : [ROLE_ANALYST] 2019-09-16 21:38:01,917 DEBUG [http-bio-7070-exec-7] cachesync.CachedCrudAssist:190 : Saving ManagedUser at /user/ANALYST
恰好使用curl命令检查时，发现报错
[dip@yz-ppdip-023 ~]$ curl -u ANALYST:test http://172.25.30.25:7070/kylin/login "en"><head>HTTP Status <span style="color:#800080;">500</span> – Internal Server Error head>HTTP Status 500 – Internal Server Error
"line" />Type Exception Report
Message Overwriting conflict /user/ANALYST, expect old TS 1568635187203, but it is 1568635214068
Description The server encountered an unexpected condition that prevented it from fulfilling the request.
Exception
org.apache.kylin.common.persistence.WriteConflictException: Overwriting conflict /user/ANALYST, expect old TS 1568635187203, but it is 1568635214068 org.apache.kylin.storage.hbase.HBaseResourceStore.checkAndPutResourceImpl(HBaseResourceStore.java:325) org.apache.kylin.common.persistence.ResourceStore.checkAndPutResourceCheckpoint(ResourceStore.java:323) org.apache.kylin.common.persistence.ResourceStore.putResource(ResourceStore.java:308) org.apache.kylin.common.persistence.ResourceStore.putResource(ResourceStore.java:287) org.apache.kylin.metadata.cachesync.CachedCrudAssist.save(CachedCrudAssist.java:192) org.apache.kylin.rest.security.KylinUserManager.update(KylinUserManager.java:122) org.apache.kylin.rest.service.KylinUserService.updateUser(KylinUserService.java:85) org.apache.kylin.rest.security.KylinAuthenticationProvider.authenticate(KylinAuthenticationProvider.java:117) org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:174) org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:199) org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilterInternal(BasicAuthenticationFilter.java:180) org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200) org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116) org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:64) org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56) org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105) org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331) org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:214) org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:177) org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346) org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:262) com.thetransactioncompany.cors.CORSFilter.doFilter(CORSFilter.java:209) com.thetransactioncompany.cors.CORSFilter.doFilter(CORSFilter.java:244)Note The full stack trace of the root cause is available in the server logs.
"line" />Apache Tomcat/7.0.90
以报错关键字进行检索，发现这是开源版本的一个bug，密码修改或者自己设置 密码时会出现的问题。
org.apache.kylin.common.persistence.WriteConflictException: Overwriting conflict /user/ANALYST, expect old TS 1568635187203, but it is
以下是开源社区的问题解决https://issues.apache.org/jira/browse/KYLIN-3562
解决办法：
$KYLIN_HOME/bin/metastore.sh remove /user
然后重启kylin集群