hadoop-common-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Manoj Samel <manoj.sa...@gmail.com>
Subject Secondary name node error in checkpoint with Kerberos enabled
Date Tue, 31 Dec 2013 22:59:43 GMT
* Name node and secondary name nodes on different machines
* Kerberos was just enabled
* Cloudera CDH 4.5 on Centos

*Secondary name node log (HOST2) shows following*


2013-12-31 22:00:11,728 ERROR
org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS)
cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException:
Image transfer servlet at
http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235failed
with status code 403
Response message:
Only Namenode, Secondary Namenode, and administrators may access this
servlet

*Name Node Log (HOST1) shows following*

2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server:
Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE)
2013-12-31 21:59:56,213 INFO
SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager:
Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for
protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol

...
2013-12-31 21:59:56,612 INFO
org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet
rejecting: hdfs/2NN-host@REALM
2013-12-31 21:59:56,615 WARN
org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received
non-NN/SNN/administrator request for image or edits from
hdfs/2NN-host@REALMat 2NN-host-IP


-- 
Thanks,

Manoj

Mime
View raw message