Return-Path: X-Original-To: apmail-ambari-dev-archive@www.apache.org Delivered-To: apmail-ambari-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 6470C17B5F for ; Fri, 27 Feb 2015 17:39:06 +0000 (UTC) Received: (qmail 39147 invoked by uid 500); 27 Feb 2015 17:39:05 -0000 Delivered-To: apmail-ambari-dev-archive@ambari.apache.org Received: (qmail 39113 invoked by uid 500); 27 Feb 2015 17:39:05 -0000 Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list dev@ambari.apache.org Received: (qmail 39067 invoked by uid 99); 27 Feb 2015 17:39:05 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 27 Feb 2015 17:39:05 +0000 Date: Fri, 27 Feb 2015 17:39:05 +0000 (UTC) From: "Hudson (JIRA)" To: dev@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (AMBARI-9832) JournalNode kerberos configs are missing when trying to enable HA MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/AMBARI-9832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14340436#comment-14340436 ] Hudson commented on AMBARI-9832: -------------------------------- FAILURE: Integrated in Ambari-trunk-Commit #1891 (See [https://builds.apache.org/job/Ambari-trunk-Commit/1891/]) AMBARI-9832 JournalNode kerberos configs are missing when trying to enable HA. (ababiichuk) (ababiichuk: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=74b4287f9d765fb3e6ec6d4064edf7693edb2a42) * ambari-web/app/controllers/main/admin/highAvailability/nameNode/step5_controller.js * ambari-web/app/controllers/main/admin/highAvailability/nameNode/step3_controller.js * ambari-web/test/controllers/main/admin/highAvailability/nameNode/step3_controller_test.js > JournalNode kerberos configs are missing when trying to enable HA > ----------------------------------------------------------------- > > Key: AMBARI-9832 > URL: https://issues.apache.org/jira/browse/AMBARI-9832 > Project: Ambari > Issue Type: Bug > Components: ambari-web > Affects Versions: 2.0.0 > Reporter: Andrii Babiichuk > Assignee: Andrii Babiichuk > Priority: Critical > Fix For: 2.0.0 > > Attachments: AMBARI-9832.patch, AMBARI-9832_branch_2.0.0.patch > > > 1. build a two node cluster, with 1 ZK (everything on c6401). c6402 should only have DN, NM and clients > 2. Then add a host c6403 with just DN, NM and clients > 3. Then add two ZKs (to c6402 and c6403) > 4. Then enable kerb. > 5. Then try to enable namenode HA. > Result: > JournalNodes start fails. > During enabling HA journalnode "kerberos configs" were added to hdfs-site.xml: > {noformat} > [root@c6401 data]# grep -ri "dfs.journalnode.kerberos.internal.spnego.principal" * > command-175.json: "dfs.journalnode.kerberos.internal.spnego.principal": "HTTP/_HOST@EXAMPLE.COM", > command-179.json: "dfs.journalnode.kerberos.internal.spnego.principal": "HTTP/_HOST@EXAMPLE.COM", > command-184.json: "dfs.journalnode.kerberos.internal.spnego.principal": "HTTP/_HOST@EXAMPLE.COM", > {noformat} > But when JNs were stating those configurations have not been in hdfs-site.xml and command.json. > {noformat} > [root@c6401 data]# grep -ri "dfs.journalnode.kerberos.internal.spnego.principal" command-188.json > [root@c6401 data]# > {noformat} > {code} > Exception in thread "main" java.io.IOException: Running in secure mode, but config doesn't have a keytab > at org.apache.hadoop.security.SecurityUtil.login(SecurityUtil.java:236) > at org.apache.hadoop.hdfs.qjournal.server.JournalNode.start(JournalNode.java:144) > {code} > *I could not reproduce it at the second attempt* -- This message was sent by Atlassian JIRA (v6.3.4#6332)