hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Trevor Powell (Created) (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HADOOP-7750) DataNode: Cannot start secure cluster without privileged resources | tags/release-0.20.205.0-rc2
Date Fri, 14 Oct 2011 23:56:11 GMT
DataNode: Cannot start secure cluster without privileged resources  | tags/release-0.20.205.0-rc2
-------------------------------------------------------------------------------------------------

                 Key: HADOOP-7750
                 URL: https://issues.apache.org/jira/browse/HADOOP-7750
             Project: Hadoop Common
          Issue Type: Bug
    Affects Versions: 0.20.205.1
         Environment: Linux RHEL5 64bit
sunjava2 1.6.0r14
http://svn.apache.org/repos/asf/hadoop/common/tags/release-0.20.205.0-rc2/branch-0.20-security-205/src/hdfs/org/apache/hadoop/hdfs/server/datanode/DataNode.java
            Reporter: Trevor Powell


This tag compiles just fine. But after configuring it, the datanode fails on startup with
the below error:


TARTUP_MSG: Starting DataNode
STARTUP_MSG:   host = hd3w94m7/10.152.94.111
STARTUP_MSG:   args = []
STARTUP_MSG:   version = 0.20.205.1
STARTUP_MSG:   build = http://svn.apache.org/repos/asf/hadoop/common/tags/release-0.20.205.0-rc2
-r 1179942; compiled by 'tpowell1' on Wed Oct 12 11:14:46 PDT 2011
************************************************************/
2011-10-14 15:24:56,028 INFO org.apache.hadoop.metrics2.impl.MetricsConfig: loaded properties
from hadoop-metrics2.properties
2011-10-14 15:24:56,043 INFO org.apache.hadoop.metrics2.impl.MetricsSourceAdapter: MBean for
source MetricsSystem,sub=Stats registered.
2011-10-14 15:24:56,044 INFO org.apache.hadoop.metrics2.impl.MetricsSystemImpl: Scheduled
snapshot period at 10 second(s).
2011-10-14 15:24:56,044 INFO org.apache.hadoop.metrics2.impl.MetricsSystemImpl: DataNode metrics
system started
2011-10-14 15:24:56,192 INFO org.apache.hadoop.metrics2.impl.MetricsSourceAdapter: MBean for
source ugi registered.
2011-10-14 15:24:56,421 INFO org.apache.hadoop.security.UserGroupInformation: Asked the TGT
renewer thread to terminate
2011-10-14 15:24:57,241 INFO org.apache.hadoop.security.UserGroupInformation: Login successful
for user hdfs/hd3w94m7@XXX using keytab file /home/tpowell1/hadoop.tags.release-0.20.205.0-rc2/conf/hdfs.keytab
2011-10-14 15:24:57,242 ERROR org.apache.hadoop.hdfs.server.datanode.DataNode: java.lang.RuntimeException:
Cannot start secure cluster without privileged resources.
        at org.apache.hadoop.hdfs.server.datanode.DataNode.startDataNode(DataNode.java:306)
        at org.apache.hadoop.hdfs.server.datanode.DataNode.<init>(DataNode.java:281)
        at org.apache.hadoop.hdfs.server.datanode.DataNode.makeInstance(DataNode.java:1545)
        at org.apache.hadoop.hdfs.server.datanode.DataNode.instantiateDataNode(DataNode.java:1484)
        at org.apache.hadoop.hdfs.server.datanode.DataNode.createDataNode(DataNode.java:1502)
        at org.apache.hadoop.hdfs.server.datanode.DataNode.secureMain(DataNode.java:1628)
        at org.apache.hadoop.hdfs.server.datanode.DataNode.main(DataNode.java:1645)

2011-10-14 15:24:57,243 INFO org.apache.hadoop.hdfs.server.datanode.DataNode: SHUTDOWN_MSG:
/************************************************************
SHUTDOWN_MSG: Shutting down DataNode at hd3w94m7.XXX/10.152.94.111
************************************************************/


Checking the Datanode.java code it is started with a null SecureResources .

  public static void main(String args[]) {
    secureMain(args, null);
  }


This null resource seems to get passed all the way down to startDataNode() where there is
a null check... which in turns throws the error we see.


  void startDataNode(Configuration conf,
                     AbstractList<File> dataDirs, SecureResources resources
                     ) throws IOException {
    if(UserGroupInformation.isSecurityEnabled() && resources == null)
      throw new RuntimeException("Cannot start secure cluster without " +
                "privileged resources.");




--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message