Return-Path: 
 <dev-return-8319-apmail-falcon-dev-archive=falcon.apache.org@falcon.incubator.apache.org>
X-Original-To: apmail-falcon-dev-archive@minotaur.apache.org
Delivered-To: apmail-falcon-dev-archive@minotaur.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id AF4B9CD19
	for <apmail-falcon-dev-archive@minotaur.apache.org>;
 Fri, 14 Nov 2014 23:40:02 +0000 (UTC)
Received: (qmail 99817 invoked by uid 500); 14 Nov 2014 23:40:01 -0000
Delivered-To: apmail-falcon-dev-archive@falcon.apache.org
Received: (qmail 99770 invoked by uid 500); 14 Nov 2014 23:40:01 -0000
Mailing-List: contact dev-help@falcon.incubator.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@falcon.incubator.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@falcon.incubator.apache.org>
List-Post: <mailto:dev@falcon.incubator.apache.org>
List-Id: <dev.falcon.incubator.apache.org>
Reply-To: dev@falcon.incubator.apache.org
Delivered-To: mailing list dev@falcon.incubator.apache.org
Received: (qmail 99755 invoked by uid 99); 14 Nov 2014 23:40:01 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Nov 2014 23:40:01 +0000
X-ASF-Spam-Status: No, hits=-2000.6 required=5.0
	tests=ALL_TRUSTED,RP_MATCHES_RCVD
X-Spam-Check-By: apache.org
Received: from [140.211.11.3] (HELO mail.apache.org) (140.211.11.3)
    by apache.org (qpsmtpd/0.29) with SMTP; Fri, 14 Nov 2014 23:39:37 +0000
Received: (qmail 99666 invoked by uid 99); 14 Nov 2014 23:39:35 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Nov 2014 23:39:35 +0000
Date: Fri, 14 Nov 2014 23:39:35 +0000 (UTC)
From: "Raghav Kumar Gautam (JIRA)" <jira@apache.org>
To: dev@falcon.incubator.apache.org
Message-ID: <JIRA.12751472.1414612041000.505317.1416008375241@Atlassian.JIRA>
In-Reply-To: <JIRA.12751472.1414612041000@Atlassian.JIRA>
References: <JIRA.12751472.1414612041000@Atlassian.JIRA>
 <JIRA.12751472.1414612041758@arcas>
Subject: [jira] [Updated] (FALCON-846) Cluster submitted by one user when
 deleted by another leads to internal server error
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
X-Virus-Checked: Checked by ClamAV on apache.org


     [ https://issues.apache.org/jira/browse/FALCON-846?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Raghav Kumar Gautam updated FALCON-846:
---------------------------------------
    Affects Version/s: 0.6

> Cluster submitted by one user when deleted by another leads to internal server error
> ------------------------------------------------------------------------------------
>
>                 Key: FALCON-846
>                 URL: https://issues.apache.org/jira/browse/FALCON-846
>             Project: Falcon
>          Issue Type: Bug
>    Affects Versions: 0.6
>            Reporter: Raghav Kumar Gautam
>            Assignee: Raghav Kumar Gautam
>             Fix For: 0.6
>
>
> Cluster was submitted by hrt_qa and deleted as root. ACL did not permitted that operation. We got internal server error which is not good.
> {code}
> 2014-10-29 15:22:53,082 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Submitting cluster: 
> <?xml version="1.0" encoding="UTF-8"?><cluster xmlns="uri:falcon:cluster:0.1" name="corp-429763eb" description="" colo="default">
>     <interfaces>
>         <interface type="readonly" endpoint="webhdfs://ip-172-31-47-32.ec2.internal:50070" version="0.20.2"/>
>         <interface type="write" endpoint="hdfs://ip-172-31-47-32.ec2.internal:8020" version="0.20.2"/>
>         <interface type="execute" endpoint="ip-172-31-47-32.ec2.internal:8032" version="0.20.2"/>
>         <interface type="workflow" endpoint="http://ip-172-31-47-32.ec2.internal:11000/oozie/" version="3.1"/>
>         <interface type="messaging" endpoint="tcp://ip-172-31-47-32.ec2.internal:61616?daemon=true" version="5.1.6"/>
>     </interfaces>
>     <locations>
>         <location name="staging" path="/tmp/falcon-regression-staging"/>
>         <location name="working" path="/tmp/falcon-regression-working"/>
>     </locations>
>     <ACL owner="hrt_qa" group="users" permission="*"/>
>     <properties>
>         <property name="field1" value="value1"/>
>         <property name="field2" value="value2"/>
>     </properties>
> </cluster>
>  (IEntityManagerHelper:275)
> 2014-10-29 15:22:53,083 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Url: http://ip-172-31-47-32.ec2.internal:15000/api/entities/submit/cluster?user.name=hrt_qa (BaseRequest:163)
> 2014-10-29 15:22:53,083 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Method: POST (BaseRequest:164)
> 2014-10-29 15:22:53,083 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Header: Name=Content-Type Value=text/xml (BaseRequest:167)
> 2014-10-29 15:22:53,084 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Header: Name=Cookie Value=hadoop.auth=u=hrt_qa&p=hrt_qa&t=simple&e=1414613478996&s=geNP9gu4jiBnl6egRohy8JkQaj8= (BaseRequest:167)
> 2014-10-29 15:22:54,040 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Status: HTTP/1.1 200 OK (BaseRequest:193)
> 2014-10-29 15:22:54,041 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Header: Name=Content-Type Value=text/xml (BaseRequest:195)
> 2014-10-29 15:22:54,041 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Header: Name=requestId Value=d452f438-8e00-46b4-b12b-726648511e2d (BaseRequest:195)
> 2014-10-29 15:22:54,041 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Header: Name=Content-Length Value=219 (BaseRequest:195)
> 2014-10-29 15:22:54,041 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Header: Name=Server Value=Jetty(6.1.26.hwx) (BaseRequest:195)
> Warning:  org.apache.xerces.parsers.SAXParser: Property 'http://javax.xml.XMLConstants/property/accessExternalDTD' is not recognized.
> Warning:  org.apache.xerces.parsers.SAXParser: Property 'http://www.oracle.com/xml/jaxp/properties/entityExpansionLimit' is not recognized.
> 2014-10-29 15:22:54,044 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ The web service response is:
> <?xml version="1.0" encoding="UTF-8"?><result>
>   <status>SUCCEEDED</status>
>   <message>falcon/default/Submit successful (cluster) corp-429763eb</message>
>   <requestId>falcon/default/null</requestId>
> </result>
>  (ServiceResponse:86)
> 2014-10-29 15:22:54,049 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Url: http://ip-172-31-47-32.ec2.internal:15000/api/entities/delete/cluster/corp-429763eb?user.name=root (BaseRequest:163)
> 2014-10-29 15:22:54,049 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Method: DELETE (BaseRequest:164)
> 2014-10-29 15:22:54,049 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Header: Name=Content-Type Value=text/xml (BaseRequest:167)
> 2014-10-29 15:22:54,050 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Request Header: Name=Cookie Value=hadoop.auth=u=root&p=root&t=simple&e=1414632081591&s=6prR/YWrZTq9pxKsX3QLu7ijiho= (BaseRequest:167)
> 2014-10-29 15:22:54,059 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Status: HTTP/1.1 500 Internal Server Error (BaseRequest:193)
> 2014-10-29 15:22:54,059 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Header: Name=requestId Value=aa55b342-411b-4af0-9cc5-c63fcb33d365 (BaseRequest:195)
> 2014-10-29 15:22:54,059 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Header: Name=Content-Length Value=0 (BaseRequest:195)
> 2014-10-29 15:22:54,060 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Response Header: Name=Server Value=Jetty(6.1.26.hwx) (BaseRequest:195)
> 2014-10-29 15:22:54,060 WARN  - [pool-46-thread-1:othersDeleteCluster] ~ The string does not seem to be either json or xml:  (Util:731)
> 2014-10-29 15:22:54,060 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ The web service response is:
>  (ServiceResponse:86)
> 2014-10-29 15:22:54,060 INFO  - [pool-46-thread-1:othersDeleteCluster] ~ Testing going to end for: org.apache.falcon.regression.security.ClusterAclTest.othersDeleteCluster([root, false]) FAILED (TestngListener:56)
> {code}
> Relevant part of falcon.application.log:
> {code}
> 2014-10-29 15:22:54,057 INFO  - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Logging in root (CurrentUser:69)
> 2014-10-29 15:22:54,057 INFO  - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Request from user: root, URL=/api/entities/delete/cluster/corp-429763eb?user.name=root (FalconAuthenticationFilter:181)
> 2014-10-29 15:22:54,057 INFO  - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Authorizing user=root against request=RequestParts{resource='entities', action='delete', entityName='corp-429763eb', entityType='cluster'} (FalconAuthorizationFilter:70)
> 2014-10-29 15:22:54,057 INFO  - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Authorizing authenticatedUser=root, against resource=entities, action=delete, entity name=corp-429763eb, entity type=cluster (DefaultAuthorizationProvider:125)
> 2014-10-29 15:22:54,057 DEBUG - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Authorizing authenticatedUser=root against entity/instance action=delete, entity name=corp-429763eb, entity type=cluster (DefaultAuthorizationProvider:279)
> 2014-10-29 15:22:54,057 INFO  - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Authorizing authenticatedUser=root, action=delete, entity=corp-429763eb, typeCLUSTER (DefaultAuthorizationProvider:178)
> 2014-10-29 15:22:54,058 ERROR - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Permission denied: authenticatedUser=root not entity owner=hrt_qa, entity=corp-429763eb, action=delete (DefaultAuthorizationProvider:214)
> 2014-10-29 15:22:54,058 ERROR - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365 root:DELETE//entities/delete/cluster/corp-429763eb] ~ Action failed: Unauthorized
> Error: Permission denied: authenticatedUser=root not entity owner=hrt_qa, entity=corp-429763eb, action=delete (FalconWebException:68)
> 2014-10-29 15:22:54,058 DEBUG - [1361290055@qtp-53336067-286:aa55b342-411b-4af0-9cc5-c63fcb33d365] ~ Audit: root/172.31.47.32 performed request http://ip-172-31-47-32.ec2.internal:15000/api/entities/delete/cluster/corp-429763eb?user.name=root (172.31.47.32) at time 2014-10-29T15:22Z (FalconAuditFilter:82)
> 2014-10-29 15:22:54,058 ERROR - [1361290055@qtp-53336067-286:] ~ /api/entities/delete/cluster/corp-429763eb (log:87)
> org.apache.falcon.FalconWebException
>         at org.apache.falcon.FalconWebException.newException(FalconWebException.java:70)
>         at org.apache.falcon.security.FalconAuthorizationFilter.doFilter(FalconAuthorizationFilter.java:76)
>         at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
>         at org.apache.falcon.security.FalconAuthenticationFilter$2.doFilter(FalconAuthenticationFilter.java:184)
>         at org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:572)
>         at org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:542)
>         at org.apache.falcon.security.FalconAuthenticationFilter.doFilter(FalconAuthenticationFilter.java:193)
>         at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
>         at org.apache.falcon.security.FalconAuditFilter.doFilter(FalconAuditFilter.java:65)
>         at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1212)
>         at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399)
>         at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
>         at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
>         at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
>         at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450)
>         at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
>         at org.mortbay.jetty.Server.handle(Server.java:326)
>         at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
>         at org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:928)
>         at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:549)
>         at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:212)
>         at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
>         at org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
>         at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)