accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "John Vines (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-1060) gc is getting an authentication error
Date Mon, 11 Feb 2013 23:49:12 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-1060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13576226#comment-13576226
] 

John Vines commented on ACCUMULO-1060:
--------------------------------------

Got it, there's a token serialization mismatch. Between the refactoring and keeping deprecated
methods, there were a few cases throughout the code where the serialized bytes of a SecurityToken
were extracted from a Credential and resupplied to a getConnector method. These bytes were
then treated as a password, resulting in a mismatch. CredentialHelper.extractToken(Credential)
will reassemble a SecurityToken give the canonical class name and serialized version of it.
This code is used in the server as well, but only after the token class has been verified
as valid by the authenticator.
                
> gc is getting an authentication error
> -------------------------------------
>
>                 Key: ACCUMULO-1060
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-1060
>             Project: Accumulo
>          Issue Type: Bug
>          Components: gc
>            Reporter: Eric Newton
>            Assignee: John Vines
>            Priority: Blocker
>             Fix For: 1.5.0
>
>
> Just started seeing this. TServers/monitor have no problems authenticating.
> {noformat}
> Unable to scan metadata table
> 	java.lang.RuntimeException: org.apache.accumulo.core.client.AccumuloSecurityException:
Error BAD_CREDENTIALS for user !SYSTEM - Username or Password is Invalid
> 		at org.apache.accumulo.core.client.impl.ScannerIterator.hasNext(ScannerIterator.java:174)
> 		at org.apache.accumulo.server.util.MetadataTable$LogEntryIterator.hasNext(MetadataTable.java:930)
> 		at org.apache.accumulo.server.gc.GarbageCollectWriteAheadLogs.removeMetadataEntries(GarbageCollectWriteAheadLogs.java:174)
> 		at org.apache.accumulo.server.gc.GarbageCollectWriteAheadLogs.collect(GarbageCollectWriteAheadLogs.java:82)
> 		at org.apache.accumulo.server.gc.SimpleGarbageCollector.run(SimpleGarbageCollector.java:302)
> 		at org.apache.accumulo.server.gc.SimpleGarbageCollector.main(SimpleGarbageCollector.java:162)
> 		at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 		at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> 		at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> 		at java.lang.reflect.Method.invoke(Method.java:597)
> 		at org.apache.accumulo.start.Main$1.run(Main.java:97)
> 		at java.lang.Thread.run(Thread.java:662)
> 	Caused by: org.apache.accumulo.core.client.AccumuloSecurityException: Error BAD_CREDENTIALS
for user !SYSTEM - Username or Password is Invalid
> 		at org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:474)
> 		at org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:298)
> 		at org.apache.accumulo.core.client.impl.ScannerIterator$Reader.run(ScannerIterator.java:82)
> 		at org.apache.accumulo.core.client.impl.ScannerIterator.hasNext(ScannerIterator.java:164)
> 		... 11 more
> 	Caused by: ThriftSecurityException(user:!SYSTEM, code:BAD_CREDENTIALS)
> 		at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result$startScan_resultStandardScheme.read(TabletClientService.java:4652)
> 		at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result$startScan_resultStandardScheme.read(TabletClientService.java:4629)
> 		at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result.read(TabletClientService.java:4552)
> 		at org.apache.thrift.TServiceClient.receiveBase(TServiceClient.java:78)
> 		at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$Client.recv_startScan(TabletClientService.java:209)
> 		at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$Client.startScan(TabletClientService.java:186)
> 		at org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:419)
> 		... 14 more
> {noformat}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message