Mailing-List: contact common-dev-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 19 Oct 2017 18:51:00 +0000 (UTC)
From: "Ajay Kumar (JIRA)" <jira@apache.org>
To: common-dev@hadoop.apache.org
Message-ID: <JIRA.13110756.1508439043000.10770.1508439060462@Atlassian.JIRA>
In-Reply-To: <JIRA.13110756.1508439043000@Atlassian.JIRA>
References: <JIRA.13110756.1508439043000@Atlassian.JIRA> <JIRA.13110756.1508439043758@jira-lw-us.apache.org>
Subject: [jira] [Created] (HADOOP-14969) Improve diagnostics in secure
 DataNode startup
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Thu, 19 Oct 2017 18:51:06 -0000

Ajay Kumar created HADOOP-14969:
-----------------------------------

             Summary: Improve diagnostics in secure DataNode startup
                 Key: HADOOP-14969
                 URL: https://issues.apache.org/jira/browse/HADOOP-14969
             Project: Hadoop Common
          Issue Type: Improvement
            Reporter: Ajay Kumar
            Assignee: Ajay Kumar


When DN secure mode configuration is incorrect, it throws the following exception from Datanode#checkSecureConfig
{code}
  private static void checkSecureConfig(DNConf dnConf, Configuration conf,
      SecureResources resources) throws RuntimeException {
    if (!UserGroupInformation.isSecurityEnabled()) {
      return;
    }
...
    throw new RuntimeException("Cannot start secure DataNode without " +
      "configuring either privileged resources or SASL RPC data transfer " +
      "protection and SSL for HTTP.  Using privileged resources in " +
      "combination with SASL RPC data transfer protection is not supported.");
{code}
The DN should print more useful diagnostics as to what exactly what went wrong.
Also when starting secure DN with resources then the startup scripts should launch the SecureDataNodeStarter class. If no SASL is configured and SecureDataNodeStarter is not used, then we could mention that too.


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-dev-help@hadoop.apache.org