hadoop-hdfs-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Senthil Kumar <senthilec...@gmail.com>
Subject Re: NFS Gateway - Secure Cluster - Mount Failed
Date Thu, 25 Aug 2016 06:37:13 GMT
Expected Client Kerberos Principle is null issue resolved now .. Added
sec=krb5 option while mounting ..

mount -vvv -t nfs -o vers=3,*sec=krb5*,proto=tcp,nolock,noacl,sync
gateway:/ hdfs_space/


mount: fstab path: "/etc/fstab"
mount: mtab path:  "/etc/mtab"
mount: lock path:  "/etc/mtab~"
mount: temp path:  "/etc/mtab.tmp"
mount: UID:        0
mount: eUID:       0
mount: spec:  "gatewaymachine:/"
mount: node:  "hdfs_space/"
mount: types: "nfs"
mount: opts:  "vers=3,sec=krb5,proto=tcp,nolock,noacl,sync"
final mount options: 'vers=3,sec=krb5,proto=tcp,nolock,noacl'
mount: external mount: argv[0] = "/sbin/mount.nfs"
mount: external mount: argv[1] = "gatewaymachine:/"
mount: external mount: argv[2] = "hdfs_space/"
mount: external mount: argv[3] = "-v"
mount: external mount: argv[4] = "-o"
mount: external mount: argv[5] =
"rw,sync,vers=3,sec=krb5,proto=tcp,nolock,noacl"
mount.nfs: timeout set for Wed Aug 24 23:34:31 2016
mount.nfs: trying text-based options
'vers=3,sec=krb5,proto=tcp,nolock,noacl,addr=10.115.22.109'
mount.nfs: prog 100003, trying vers=3, prot=6
mount.nfs: trying 10.115.22.109 prog 100003 vers 3 prot TCP port 2049
mount.nfs: prog 100005, trying vers=3, prot=6
mount.nfs: trying 10.115.22.109 prog 100005 vers 3 prot TCP port 4242
*mount.nfs: mount(2): Permission denied*
*mount.nfs: access denied by server while mounting gatewaymachine:/*


Not sure why mount throwing permission issue .. Anybody faced this issue ??


--Senthil

On Thu, Aug 25, 2016 at 10:53 AM, Senthil Kumar <senthilec566@gmail.com>
wrote:

> Hi Team ,  As part of NFS Evaluation , i have installed NFS Gateway
> Service in Secure Cluster ..
>
>
> Config in Gateway Machine:
> <property>
>         <name>nfs.file.dump.dir</name>
>         <value>/tmp/.hdfs-nfs</value>
>    </property>
>    <property>
>         <name>nfs.keytab.file</name>
>         <value>/etc/hadoop/hadoop.keytab</value>
>    </property>
>    <property>
>         <name>nfs.kerberos.principal</name>
>         <value>hadoop/_HOST@APD.XXXX.COM</value>
>    </property>
>
>
> NFS3 Service Started Successfully , but when i try to Mount the root /
> directory it failed with below error ..
>
> WARN org.apache.hadoop.hdfs.nfs.nfs3.RpcProgramNfs3: Exception
> org.apache.hadoop.ipc.RemoteException(org.apache.
> hadoop.security.authorize.AuthorizationException):
> User root (auth:PROXY) via hadoop/phxdpehdc30dn0029.
> stratus.phx.ebay.com@APD.EBAY.COM (auth:KERBEROS)
>  is not authorized for protocol interface org.apache.hadoop.hdfs.protocol.ClientProtocol,
> *expected client Kerberos principal is null*
>
>
> mount command:
> *mount *-t nfs -o vers=3,proto=tcp,nolock,noacl,sync gatewaymachine:/
> hdfs_space/
> *mount.nfs: mount system call failed*
>
>
> What could be the issue here ??  I followed https://hadoop.
> apache.org/docs/r2.7.2/hadoop-project-dist/hadoop-hdfs/HdfsNfsGateway.html
> this documentation ..
>
>
> --Senthil
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message