giraph-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Prajakta Kalmegh <pkalm...@gmail.com>
Subject Running Giraph with secure Hadoop
Date Tue, 20 Nov 2012 02:48:31 GMT
Hi

Re-posting my previous problem:
I am trying to configure Hadoop with Kerberos following the
instructions given at
<https://cwiki.apache.org/confluence/display/GIRAPH/Quick+Start+-+Running+Giraph+with+Secure+Hadoop>.

Instead of using the principals.sh file, I am creating just a single
principal pkalmegh@HADOOP.LOCALDOMAIN and getting the ticket for it in
pkalmegh.keytab file. I am storing this in
$HOME/kerb-setup/pkalmegh.keytab and using this to configure the
hdfs-site and core-site.xml.

I am still getting the following Connection Refused error:
pkalmegh@sap-OptiPlex-755:~/Projects/hadoop$ bin/hadoop namenode
Warning: $HADOOP_HOME is deprecated.

12/11/19 18:30:25 INFO namenode.NameNode: STARTUP_MSG:
/************************************************************
STARTUP_MSG: Starting NameNode
STARTUP_MSG:   host = sap-OptiPlex-755/127.0.1.1
STARTUP_MSG:   args = []
STARTUP_MSG:   version = 1.0.3
STARTUP_MSG:   build =
https://svn.apache.org/repos/asf/hadoop/common/branches/branch-1.0 -r
1335192; compiled by 'hortonfo' on Tue May  8 20:31:25 UTC 2012
************************************************************/
12/11/19 18:30:25 INFO impl.MetricsConfig: loaded properties from
hadoop-metrics2.properties
12/11/19 18:30:25 INFO impl.MetricsSourceAdapter: MBean for source
MetricsSystem,sub=Stats registered.
12/11/19 18:30:25 INFO impl.MetricsSystemImpl: Scheduled snapshot
period at 10 second(s).
12/11/19 18:30:25 INFO impl.MetricsSystemImpl: NameNode metrics system started
12/11/19 18:30:25 INFO impl.MetricsSourceAdapter: MBean for source ugi
registered.
12/11/19 18:30:26 ERROR namenode.NameNode: java.io.IOException: Login
failure for pkalmegh@HADOOP.LOCALDOMAIN from keytab
/home/pkalmegh/kerb-setup/pkalmegh.keytab
	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:630)
	at org.apache.hadoop.security.SecurityUtil.login(SecurityUtil.java:298)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:264)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:496)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1279)
	at org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNode.java:1288)
Caused by: javax.security.auth.login.LoginException: Connection refused
	at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:700)
	at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:542)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:597)
	at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
	at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
	at javax.security.auth.login.LoginContext$5.run(LoginContext.java:706)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginContext.java:703)
	at javax.security.auth.login.LoginContext.login(LoginContext.java:575)
	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:621)
	... 5 more
Caused by: java.net.ConnectException: Connection refused
	at java.net.PlainSocketImpl.socketConnect(Native Method)
	at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:351)
	at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:213)
	at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:200)
	at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
	at java.net.Socket.connect(Socket.java:529)
	at sun.security.krb5.internal.TCPClient.<init>(TCPClient.java:46)
	at sun.security.krb5.KrbKdcReq$KdcCommunication.run(KrbKdcReq.java:343)
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.security.krb5.KrbKdcReq.send(KrbKdcReq.java:296)
	at sun.security.krb5.KrbKdcReq.send(KrbKdcReq.java:202)
	at sun.security.krb5.KrbKdcReq.send(KrbKdcReq.java:175)
	at sun.security.krb5.KrbAsReq.send(KrbAsReq.java:431)
	at sun.security.krb5.Credentials.sendASRequest(Credentials.java:400)
	at sun.security.krb5.Credentials.acquireTGT(Credentials.java:350)
	at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:672)
	... 17 more

12/11/19 18:30:26 INFO namenode.NameNode: SHUTDOWN_MSG:
/************************************************************
SHUTDOWN_MSG: Shutting down NameNode at sap-OptiPlex-755/127.0.1.1
************************************************************/

---------------------------------------------------------------------------------------------------
I am running Hadoop 1.0.3 on Ubuntu 12.04. I have specified
dfs.namenode.user.name to be pkalmegh and am using
pkalmegh@HADOOP.LOCALDOMAIN as my principal. Any idea how to fix this
issue?

Regards,
Prajakta

Mime
View raw message