accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Josh Elser (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-3568) du fails due to principal mismatch
Date Tue, 10 Feb 2015 19:49:12 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-3568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14314771#comment-14314771
] 

Josh Elser commented on ACCUMULO-3568:
--------------------------------------

It looks like the implementation {{du}} is actually issuing an RPC as the Accumulo server
instead of the client. This transparently passes w/o Kerberos because there's no verification
that the user is who they say they are (although it would fail if they couldn't read accumulo-site.xml).

{{TableOperationsImpl.getDiskUsage}} shouldn't be using {{ServerClient}} regardless of whether
we are running with kerberos or not.

> du fails due to principal mismatch
> ----------------------------------
>
>                 Key: ACCUMULO-3568
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3568
>             Project: Accumulo
>          Issue Type: Bug
>          Components: shell
>         Environment: kerberos
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>            Priority: Critical
>             Fix For: 1.7.0
>
>
> For some reason, the credentials used in the shell to execute a {{du}} with the system
user's instead of the shell user's.
> The server caught the mismatch in the principals (at the RPC level and the Accumulo Credentials
object) and prevented the RPC, but need to figure out why this shell command is doing things
differently than all of the rest.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message