accumulo-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject [6/6] accumulo git commit: Merge branch '1.8'
Date Fri, 07 Oct 2016 05:29:23 GMT
Merge branch '1.8'


Branch: refs/heads/master
Commit: 9dddeed885d8ae4c6ba34eca561dcdb747131d68
Parents: 1c218de 91269bf
Author: Sean Busbey <>
Authored: Fri Oct 7 00:28:21 2016 -0500
Committer: Sean Busbey <>
Committed: Fri Oct 7 00:28:21 2016 -0500

 docs/src/main/asciidoc/chapters/kerberos.txt | 104 +++++++++++++++++++++-
 1 file changed, 101 insertions(+), 3 deletions(-)
diff --cc docs/src/main/asciidoc/chapters/kerberos.txt
index 7817c8d,bfb7cb7..48553b7
--- a/docs/src/main/asciidoc/chapters/kerberos.txt
+++ b/docs/src/main/asciidoc/chapters/kerberos.txt
@@@ -558,5 -621,40 +621,40 @@@ Caused by: org.apache.thrift.transport.
  on, is extremely important when negotiating an SASL connection. This problem commonly arises
when the Accumulo
  servers are not configured to listen on the address denoted by their FQDN.
 -The values in the Accumulo "hosts" files (In +$ACCUMULO_CONF_DIR+: +masters+, +monitors+,
+slaves+, +tracers+,
 +The values in the Accumulo "hosts" files (In +$ACCUMULO_CONF_DIR+: +masters+, +monitors+,
+tservers+, +tracers+,
  and +gc+) should match the instance componentof the Kerberos server principal (e.g. +host+
in +accumulo/host@EXAMPLE.COM+).
+ *Q*: After configuring my system for Kerberos, server processes come up normally and I can
interact with the system. However,
+ when I attempt to use the "Recent Traces" page on the Monitor UI I get a stacktrace similar
+ ----
+                                                                          java.lang.AssertionError:
AuthenticationToken should not be null
+                                                                    at org.apache.accumulo.monitor.servlets.trace.Basic.getScanner(
+                                                                   at org.apache.accumulo.monitor.servlets.trace.Summary.pageBody(
+                                                                   at org.apache.accumulo.monitor.servlets.BasicServlet.doGet(
+                                                                            at javax.servlet.http.HttpServlet.service(
+                                                                            at javax.servlet.http.HttpServlet.service(
+                                                                       at org.eclipse.jetty.servlet.ServletHolder.handle(
+                                                                     at org.eclipse.jetty.servlet.ServletHandler.doHandle(
+                                                                   at org.eclipse.jetty.server.handler.ScopedHandler.handle(
+                                                                    at
+                                                                 at org.eclipse.jetty.server.session.SessionHandler.doHandle(
+                                                                 at org.eclipse.jetty.server.handler.ContextHandler.doHandle(
+                                                                     at org.eclipse.jetty.servlet.ServletHandler.doScope(
+                                                                  at org.eclipse.jetty.server.session.SessionHandler.doScope(
+                                                                 at org.eclipse.jetty.server.handler.ContextHandler.doScope(
+                                                                   at org.eclipse.jetty.server.handler.ScopedHandler.handle(
+                                                                   at org.eclipse.jetty.server.handler.HandlerWrapper.handle(
+                                                                              at org.eclipse.jetty.server.Server.handle(
+                                                                         at org.eclipse.jetty.server.HttpChannel.handle(
+                                                                    at org.eclipse.jetty.server.HttpConnection.onFillable(
+                                                                     at$
+                                                                  at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(
+                                                                  at org.eclipse.jetty.util.thread.QueuedThreadPool$
+                                                                                       at
+ ----
+ *A*: This indicates that the Monitor has not been able to successfully log in a client-side
user to read from the +trace+ table. Accumulo allows the TraceServer to rely on the property
+general.kerberos.keytab+ as a fallback when logging in the trace user if the
property isn't defined. Some earlier versions of Accumulo did not do this same fallback for
the Monitor's use of the trace user. The end result is that if you configure +general.kerberos.keytab+
and not you will end up with a system that properly logs trace
information but can't view it.
+ Ensure you have set to point to a keytab for the principal
defined in +trace.user+ in the +accumulo-site.xml+ file for the Monitor, since that should
work in all versions of Accumulo.

View raw message