Mailing-List: contact dev-help@accumulo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@accumulo.apache.org
Received-SPF: pass (athena.apache.org: domain of eric.newton@gmail.com
 designates 209.85.213.169 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAOiJXP5bL8xa=Hoxos7bude=2unpf5Guqx2ejiOrin4TwyesKA@mail.gmail.com>
References: 
 <CAOiJXP4F6r9K80HEJJQEQ_S--=cDYdGz2QQj-pyA6sxzSw_iPg@mail.gmail.com>
	<CADxc9B=z5t7d5YZ4wgzq5hXzigFYz9ej=s3ttd6tnM3RLVvvSQ@mail.gmail.com>
	<CAOiJXP5bL8xa=Hoxos7bude=2unpf5Guqx2ejiOrin4TwyesKA@mail.gmail.com>
Date: Tue, 10 Jul 2012 23:53:28 -0400
Message-ID: 
 <CADxc9B=LtR9ZHwyyqtZFjp-r2ac2+sKg9o2Hgg0G=-ZKFCPQ=g@mail.gmail.com>
Subject: Re: On Monitor page, NameNode shows "Permission Denied"
From: Eric Newton <eric.newton@gmail.com>
To: dev@accumulo.apache.org
Content-Type: text/plain; charset=ISO-8859-1

Well, separating users is always a better security option, but you
just lose out on this monitoring option.

I've just grown used to seeing it red.  I can always click-through and
see the monitoring page for HDFS.


On Tue, Jul 10, 2012 at 11:10 PM, David Medinets
<david.medinets@gmail.com> wrote:
> You're right. I have 'hadoop', 'zookeeper' and 'accumulo' users. I
> should be running the accumulo processes as the hadoop user?
>
> On Tue, Jul 10, 2012 at 10:58 PM, Eric Newton <eric.newton@gmail.com> wrote:
>> You are running accumulo with a different user than the HDFS "root"
>> user. The API restricts the status information if you aren't running
>> as that user.
>>
>> I'm trying to avoid turning Accumulo into a monitoring program, so
>> that's the best we can do as the ecosystem improves the security
>> model.
>>
>> -Eric
>>
>> On Tue, Jul 10, 2012 at 10:52 PM, David Medinets
>> <david.medinets@gmail.com> wrote:
>>> I am running Accumulo on a Linode server. I can run the shell from the
>>> ubuntu command line. It seems to work fine. All of the configuration
>>> uses localhost. The Accumulo monitor page is available at
>>> http://accumulo.affy.com:50095. If you visit, you'll see that the
>>> NameNode section shows "Permission Denied" and the "Accumulo Master"
>>> section is empty. Do you know what I could have configured
>>> incorrectly?