cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andreas Schnitzerling (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CASSANDRA-9694) system_auth not upgraded
Date Thu, 02 Jul 2015 09:57:04 GMT

    [ https://issues.apache.org/jira/browse/CASSANDRA-9694?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14611731#comment-14611731
] 

Andreas Schnitzerling commented on CASSANDRA-9694:
--------------------------------------------------

I made a test: I stopped C*, renamed the system_auth folder and started C* again. Result:
I can still login as a created user and I got an exception.
{code:title=system.log}
WARN  [GossipTasks:1] 2015-07-02 11:46:03,060 FailureDetector.java:245 - Not marking nodes
down due to local pause of 172056754011 > 5000000000
ERROR [Thrift:1] 2015-07-02 11:48:54,008 CustomTThreadPoolServer.java:223 - Error occurred
during processing of message.
com.google.common.util.concurrent.UncheckedExecutionException: com.google.common.util.concurrent.UncheckedExecutionException:
java.lang.RuntimeException: org.apache.cassandra.exceptions.ReadTimeoutException: Operation
timed out - received only 0 responses.
	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2201) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache.get(LocalCache.java:3934) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3938) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4821) ~[guava-16.0.jar:na]
	at org.apache.cassandra.auth.PermissionsCache.getPermissions(PermissionsCache.java:72) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.AuthenticatedUser.getPermissions(AuthenticatedUser.java:104)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.ClientState.authorize(ClientState.java:362) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.ClientState.checkPermissionOnResourceChain(ClientState.java:295)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.ClientState.ensureHasPermission(ClientState.java:272) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.ClientState.hasAccess(ClientState.java:259) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.ClientState.hasColumnFamilyAccess(ClientState.java:243) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.cql3.statements.SelectStatement.checkAccess(SelectStatement.java:143)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.cql3.QueryProcessor.processStatement(QueryProcessor.java:222) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.cql3.QueryProcessor.process(QueryProcessor.java:256) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.cql3.QueryProcessor.process(QueryProcessor.java:241) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.thrift.CassandraServer.execute_cql3_query(CassandraServer.java:1891)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.thrift.Cassandra$Processor$execute_cql3_query.getResult(Cassandra.java:4588)
~[apache-cassandra-thrift-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.thrift.Cassandra$Processor$execute_cql3_query.getResult(Cassandra.java:4572)
~[apache-cassandra-thrift-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39) ~[libthrift-0.9.2.jar:0.9.2]
	at org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39) ~[libthrift-0.9.2.jar:0.9.2]
	at org.apache.cassandra.thrift.CustomTThreadPoolServer$WorkerProcess.run(CustomTThreadPoolServer.java:204)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [na:1.7.0_55]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [na:1.7.0_55]
	at java.lang.Thread.run(Unknown Source) [na:1.7.0_55]
Caused by: com.google.common.util.concurrent.UncheckedExecutionException: java.lang.RuntimeException:
org.apache.cassandra.exceptions.ReadTimeoutException: Operation timed out - received only
0 responses.
	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2201) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache.get(LocalCache.java:3934) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3938) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4821) ~[guava-16.0.jar:na]
	at org.apache.cassandra.auth.RolesCache.getRoles(RolesCache.java:70) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.Roles.hasSuperuserStatus(Roles.java:51) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.AuthenticatedUser.isSuper(AuthenticatedUser.java:71) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.CassandraAuthorizer.authorize(CassandraAuthorizer.java:76) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.PermissionsCache$1.load(PermissionsCache.java:124) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.PermissionsCache$1.load(PermissionsCache.java:121) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3524)
~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2317) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2280) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2195) ~[guava-16.0.jar:na]
	... 23 common frames omitted
Caused by: java.lang.RuntimeException: org.apache.cassandra.exceptions.ReadTimeoutException:
Operation timed out - received only 0 responses.
	at org.apache.cassandra.auth.CassandraRoleManager.getRole(CassandraRoleManager.java:466)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.CassandraRoleManager.getRoles(CassandraRoleManager.java:270)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.RolesCache$1.load(RolesCache.java:122) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.RolesCache$1.load(RolesCache.java:119) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3524)
~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2317) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2280) ~[guava-16.0.jar:na]
	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2195) ~[guava-16.0.jar:na]
	... 36 common frames omitted
Caused by: org.apache.cassandra.exceptions.ReadTimeoutException: Operation timed out - received
only 0 responses.
	at org.apache.cassandra.service.ReadCallback.get(ReadCallback.java:108) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.AbstractReadExecutor.get(AbstractReadExecutor.java:140) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.StorageProxy.fetchRows(StorageProxy.java:1385) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.StorageProxy.readRegular(StorageProxy.java:1309) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.service.StorageProxy.read(StorageProxy.java:1226) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.cql3.statements.SelectStatement.execute(SelectStatement.java:221)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.cql3.statements.SelectStatement.execute(SelectStatement.java:174)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.CassandraRoleManager.getRoleFromTable(CassandraRoleManager.java:474)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	at org.apache.cassandra.auth.CassandraRoleManager.getRole(CassandraRoleManager.java:461)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
	... 43 common frames omitted
{code}
This 2.2.0 node is the only one of 15 in a 2.1.7 cluster.

> system_auth not upgraded
> ------------------------
>
>                 Key: CASSANDRA-9694
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-9694
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Core
>         Environment: Windows-7-32 bit, 3.2GB RAM, Java 1.7.0_55
>            Reporter: Andreas Schnitzerling
>            Assignee: Sam Tunnicliffe
>         Attachments: system_exception.log
>
>
> After upgrading Authorization-Exceptions occur. I checked the system_auth keyspace and
have seen, that tables users, credentials and permissions were not upgraded automatically.
I upgraded them (I needed 2 times per table because of CASSANDRA-9566). After upgrading the
system_auth tables I could login via cql using different users.
> {code:title=system.log}
> WARN  [Thrift:14] 2015-07-01 11:38:57,748 CassandraAuthorizer.java:91 - CassandraAuthorizer
failed to authorize #<User updateprog> for <keyspace logdata>
> ERROR [Thrift:14] 2015-07-01 11:41:26,210 CustomTThreadPoolServer.java:223 - Error occurred
during processing of message.
> com.google.common.util.concurrent.UncheckedExecutionException: java.lang.RuntimeException:
org.apache.cassandra.exceptions.ReadTimeoutException: Operation timed out - received only
0 responses.
> 	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2201) ~[guava-16.0.jar:na]
> 	at com.google.common.cache.LocalCache.get(LocalCache.java:3934) ~[guava-16.0.jar:na]
> 	at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3938) ~[guava-16.0.jar:na]
> 	at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4821) ~[guava-16.0.jar:na]
> 	at org.apache.cassandra.auth.PermissionsCache.getPermissions(PermissionsCache.java:72)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.auth.AuthenticatedUser.getPermissions(AuthenticatedUser.java:104)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.service.ClientState.authorize(ClientState.java:362) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.service.ClientState.checkPermissionOnResourceChain(ClientState.java:295)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.service.ClientState.ensureHasPermission(ClientState.java:272)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.service.ClientState.hasAccess(ClientState.java:259) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.service.ClientState.hasColumnFamilyAccess(ClientState.java:243)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.cql3.statements.SelectStatement.checkAccess(SelectStatement.java:143)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.cql3.QueryProcessor.processStatement(QueryProcessor.java:222)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.cql3.QueryProcessor.process(QueryProcessor.java:256) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.cql3.QueryProcessor.process(QueryProcessor.java:241) ~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.thrift.CassandraServer.execute_cql3_query(CassandraServer.java:1891)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.thrift.Cassandra$Processor$execute_cql3_query.getResult(Cassandra.java:4588)
~[apache-cassandra-thrift-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.cassandra.thrift.Cassandra$Processor$execute_cql3_query.getResult(Cassandra.java:4572)
~[apache-cassandra-thrift-2.2.0-rc1.jar:2.2.0-rc1]
> 	at org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39) ~[libthrift-0.9.2.jar:0.9.2]
> 	at org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39) ~[libthrift-0.9.2.jar:0.9.2]
> 	at org.apache.cassandra.thrift.CustomTThreadPoolServer$WorkerProcess.run(CustomTThreadPoolServer.java:204)
~[apache-cassandra-2.2.0-rc1.jar:2.2.0-rc1]
> 	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [na:1.7.0_55]
> 	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [na:1.7.0_55]
> 	at java.lang.Thread.run(Unknown Source) [na:1.7.0_55]
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message