Return-Path: 
 <dev-return-51342-apmail-ambari-dev-archive=ambari.apache.org@ambari.apache.org>
X-Original-To: apmail-ambari-dev-archive@www.apache.org
Delivered-To: apmail-ambari-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id C56A2965C
	for <apmail-ambari-dev-archive@www.apache.org>;
 Wed, 17 Dec 2014 10:12:13 +0000 (UTC)
Received: (qmail 11128 invoked by uid 500); 17 Dec 2014 10:12:13 -0000
Delivered-To: apmail-ambari-dev-archive@ambari.apache.org
Received: (qmail 11088 invoked by uid 500); 17 Dec 2014 10:12:13 -0000
Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@ambari.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@ambari.apache.org>
List-Post: <mailto:dev@ambari.apache.org>
List-Id: <dev.ambari.apache.org>
Reply-To: dev@ambari.apache.org
Delivered-To: mailing list dev@ambari.apache.org
Received: (qmail 11076 invoked by uid 99); 17 Dec 2014 10:12:13 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 17 Dec 2014 10:12:13 +0000
Date: Wed, 17 Dec 2014 10:12:13 +0000 (UTC)
From: "Hari Sekhon (JIRA)" <jira@apache.org>
To: dev@ambari.apache.org
Message-ID: <JIRA.12762243.1418811077000.42353.1418811133426@Atlassian.JIRA>
In-Reply-To: <JIRA.12762243.1418811077000@Atlassian.JIRA>
References: <JIRA.12762243.1418811077000@Atlassian.JIRA>
 <JIRA.12762243.1418811077476@arcas>
Subject: [jira] [Created] (AMBARI-8748) HDFS Rebalance Kerberos Support
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394

Hari Sekhon created AMBARI-8748:
-----------------------------------

             Summary: HDFS Rebalance Kerberos Support
                 Key: AMBARI-8748
                 URL: https://issues.apache.org/jira/browse/AMBARI-8748
             Project: Ambari
          Issue Type: Improvement
    Affects Versions: 1.7.0
         Environment: HDP 2.1
            Reporter: Hari Sekhon
            Priority: Minor


Ambari's new HDFS Rebalance option doesn't work with Kerberos enabled on a cluster because it doesn't obtain a TGT first.

{code}
Executing command ['su', '-', u'hdfs', '-c', u'export PATH=$PATH:/usr/bin ; hdfs --config /etc/hadoop/conf balancer -threshold 1']
[balancer] 2014-12-17 09:57:17.124218 Time Stamp               Iteration#  Bytes Already Moved  Bytes Left To Move  Bytes Being Moved
[balancer] 2014-12-17 09:57:18.001836 java.io.IOException: Failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]; Host Details : local host is: "<hostname>/x.x.x.x"; destination host is: "<hostname>":8020; .  Exiting ...
{code}

The workaround for this is simply to do
{code}
su - hdfs -c 'kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs'
{code}

in shell before clicking the Web UI's Rebalance HDFS button.

Ambari should check if the cluster is kerberized and if so run the command {code}kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs{code} as hdfs just prior to starting the balancer.

Regards,

Hari Sekhon
http://www.linkedin.com/in/harisekhon



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)