ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mahadev Konar" <maha...@apache.org>
Subject Re: Review Request 35656: Error using Slider view with wire-encryption enabled
Date Fri, 19 Jun 2015 17:38:38 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35656/#review88554
-----------------------------------------------------------

Ship it!


Ship It!

- Mahadev Konar


On June 19, 2015, 5:36 p.m., Andrew Onischuk wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35656/
> -----------------------------------------------------------
> 
> (Updated June 19, 2015, 5:36 p.m.)
> 
> 
> Review request for Ambari and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12024
>     https://issues.apache.org/jira/browse/AMBARI-12024
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> Another noticed wireencryption issue. Trying to debug some slider-hbase
> failures with wireencryption enabled and noticed errors in the ambari-
> server.log after the app creation failed in the GUI (eventually puts up an
> HTTP/500 error "window").
> 
>     
>     
>     17 Jun 2015 02:39:04,129 ERROR [qtp-client-26] AbstractResourceProvider:181 - Caught
exception getting view sub resources.
>     java.lang.RuntimeException: sun.security.validator.ValidatorException: PKIX path
building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
>     	at org.apache.ambari.view.slider.rest.client.SliderAppMasterClient.getAppMasterData(SliderAppMasterClient.java:84)
>     	at org.apache.ambari.view.slider.SliderAppsViewControllerImpl.createSliderAppObject(SliderAppsViewControllerImpl.java:670)
>     	at org.apache.ambari.view.slider.SliderAppsViewControllerImpl.access$100(SliderAppsViewControllerImpl.java:97)
>     	at org.apache.ambari.view.slider.SliderAppsViewControllerImpl$7.run(SliderAppsViewControllerImpl.java:914)
>     	at org.apache.ambari.view.slider.SliderAppsViewControllerImpl$7.run(SliderAppsViewControllerImpl.java:906)
>     	at org.apache.ambari.view.slider.SliderAppsViewControllerImpl$3.run(SliderAppsViewControllerImpl.java:519)
>     	at java.security.AccessController.doPrivileged(Native Method)
>     	at javax.security.auth.Subject.doAs(Subject.java:415)
>     	at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
>     	at org.apache.ambari.view.slider.SliderAppsViewControllerImpl.invokeSliderClientRunnable(SliderAppsViewControllerImpl.java:514)
>     	at org.apache.ambari.view.slider.SliderAppsViewControllerImpl.getSliderApps(SliderAppsViewControllerImpl.java:906)
>     	at org.apache.ambari.view.slider.SliderAppsResourceProvider.getResources(SliderAppsResourceProvider.java:98)
>     	at org.apache.ambari.server.view.ViewSubResourceProvider.getResources(ViewSubResourceProvider.java:165)
>     	at org.apache.ambari.server.controller.internal.ClusterControllerImpl$ExtendedResourceProviderWrapper.queryForResources(ClusterControllerImpl.java:945)
>     	at org.apache.ambari.server.controller.internal.ClusterControllerImpl.getResources(ClusterControllerImpl.java:132)
>     	at org.apache.ambari.server.api.query.QueryImpl.doQuery(QueryImpl.java:482)
>     	at org.apache.ambari.server.api.query.QueryImpl.queryForSubResources(QueryImpl.java:437)
>     	at org.apache.ambari.server.api.query.QueryImpl.queryForResources(QueryImpl.java:410)
>     	at org.apache.ambari.server.api.query.QueryImpl.execute(QueryImpl.java:217)
>     	at org.apache.ambari.server.api.handlers.ReadHandler.handleRequest(ReadHandler.java:68)
>     	at org.apache.ambari.server.api.services.BaseRequest.process(BaseRequest.java:135)
>     	at org.apache.ambari.server.api.services.BaseService.handleRequest(BaseService.java:105)
>     	at org.apache.ambari.server.api.services.BaseService.handleRequest(BaseService.java:74)
>     	at org.apache.ambari.server.api.services.ViewInstanceService.getService(ViewInstanceService.java:96)
>     	at sun.reflect.GeneratedMethodAccessor205.invoke(Unknown Source)
>     	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>     	at java.lang.reflect.Method.invoke(Method.java:606)
>     	at com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
>     	at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:205)
>     	at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
>     	at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302)
>     	at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>     	at com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
>     	at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>     	at com.sun.jersey.server.impl.uri.rules.SubLocatorRule.accept(SubLocatorRule.java:137)
>     	at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>     	at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
>     	at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
>     	at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
>     	at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1542)
>     	at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1473)
>     	at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1419)
>     	at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1409)
>     	at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:409)
>     	at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:540)
>     	at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:715)
>     	at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)
>     	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:684)
>     	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1496)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:330)
>     	at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:118)
>     	at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:84)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:103)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:45)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.apache.ambari.server.security.authorization.AmbariAuthorizationFilter.doFilter(AmbariAuthorizationFilter.java:178)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:150)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
>     	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
>     	at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)
>     	at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
>     	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237)
>     	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
>     	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>     	at org.apache.ambari.server.api.MethodOverrideFilter.doFilter(MethodOverrideFilter.java:72)
>     	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>     	at org.apache.ambari.server.api.AmbariPersistFilter.doFilter(AmbariPersistFilter.java:47)
>     	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>     	at org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:82)
>     	at org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:294)
>     	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1467)
>     	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:501)
>     	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)
>     	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557)
>     	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)
>     	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)
>     	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:429)
>     	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)
>     	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)
>     	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
>     	at org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:209)
>     	at org.apache.ambari.server.controller.AmbariHandlerList.processHandlers(AmbariHandlerList.java:198)
>     	at org.apache.ambari.server.controller.AmbariHandlerList.handle(AmbariHandlerList.java:132)
>     	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
>     	at org.eclipse.jetty.server.Server.handle(Server.java:370)
>     	at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:494)
>     	at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:971)
>     	at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1033)
>     	at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644)
>     	at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)
>     	at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
>     	at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:696)
>     	at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:53)
>     	at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608)
>     	at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543)
>     	at java.lang.Thread.run(Thread.java:745)
>     Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
>     	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
>     	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1904)
>     	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:279)
>     	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:273)
>     	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1446)
>     	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:209)
>     	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:901)
>     	at sun.security.ssl.Handshaker.process_record(Handshaker.java:837)
>     	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1023)
>     	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1332)
>     	at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:709)
>     	at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122)
>     	at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
>     	at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
>     	at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:828)
>     	at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2116)
>     	at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)
>     	at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
>     	at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
>     	at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
>     	at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
>     	at org.apache.ambari.view.slider.rest.client.BaseHttpClient.doGet(BaseHttpClient.java:118)
>     	at org.apache.ambari.view.slider.rest.client.SliderAppMasterClient.getAppMasterData(SliderAppMasterClient.java:55)
>     	... 105 more
>     Caused by: sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification
path to requested target
>     	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
>     	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
>     	at sun.security.validator.Validator.validate(Validator.java:260)
>     	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
>     	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
>     	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
>     	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1428)
>     	... 123 more
>     Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
>     	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
>     	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
>     	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
>     	... 129 more
> 
> 
> Diffs
> -----
> 
>   ambari-server/conf/ambari-env.sh fe2694a 
>   ambari-server/conf/unix/ambari-env.sh ff27cff 
>   ambari-server/src/main/python/ambari_server_main.py 1e6b2ec 
> 
> Diff: https://reviews.apache.org/r/35656/diff/
> 
> 
> Testing
> -------
> 
> mvn clean test
> 
> 
> Thanks,
> 
> Andrew Onischuk
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message