hadoop-hdfs-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Senthil Kumar <senthilec...@gmail.com>
Subject Re: NFS Gateway - Secure Cluster - Mount Failed
Date Thu, 25 Aug 2016 11:28:55 GMT
Started NFS Service in DEBUG mode and found below logs ...

2016-08-25 03:59:05,766 DEBUG
org.apache.hadoop.hdfs.nfs.nfs3.RpcProgramNfs3: NFS NULL
2016-08-25 03:59:05,768 DEBUG
org.apache.hadoop.hdfs.nfs.mount.RpcProgramMountd: MOUNT NULLOP :  client:
/IP_ADDR
2016-08-25 03:59:05,770 DEBUG
org.apache.hadoop.hdfs.nfs.mount.RpcProgramMountd: MOUNT NULLOP :  client:
/IP_ADDR
2016-08-25 03:59:05,771 DEBUG
org.apache.hadoop.hdfs.nfs.mount.RpcProgramMountd: MOUNT MNT path: /
client: /IP_ADDR
2016-08-25 03:59:05,771 DEBUG
org.apache.hadoop.hdfs.nfs.mount.RpcProgramMountd: Got host: gateway path: /
2016-08-25 03:59:05,783 INFO
org.apache.hadoop.hdfs.nfs.mount.RpcProgramMountd: Giving handle
(fileId:16385) to client for export /

==== { Looks like mount operation done } ======
2016-08-25 03:59:05,784 DEBUG
*org.apache.hadoop.hdfs.nfs.mount.RpcProgramMountd:
MOUNT UMNT path: / client: /IP_ADDR*
==== { Why client is Sending UMNT request } ====

Here is the MNT CMD:

*mount -vvv -t nfs -o vers=3,sec=krb5,proto=tcp,nolock,sync IP_ADDR:/
/hdfs_space*

Can someone help me here to understand the behavior ?? and how to solve
this mnt issue ??

--Senthil

On Thu, Aug 25, 2016 at 12:07 PM, Senthil Kumar <senthilec566@gmail.com>
wrote:

> Expected Client Kerberos Principle is null issue resolved now .. Added
> sec=krb5 option while mounting ..
>
> mount -vvv -t nfs -o vers=3,*sec=krb5*,proto=tcp,nolock,noacl,sync
> gateway:/ hdfs_space/
>
>
> mount: fstab path: "/etc/fstab"
> mount: mtab path:  "/etc/mtab"
> mount: lock path:  "/etc/mtab~"
> mount: temp path:  "/etc/mtab.tmp"
> mount: UID:        0
> mount: eUID:       0
> mount: spec:  "gatewaymachine:/"
> mount: node:  "hdfs_space/"
> mount: types: "nfs"
> mount: opts:  "vers=3,sec=krb5,proto=tcp,nolock,noacl,sync"
> final mount options: 'vers=3,sec=krb5,proto=tcp,nolock,noacl'
> mount: external mount: argv[0] = "/sbin/mount.nfs"
> mount: external mount: argv[1] = "gatewaymachine:/"
> mount: external mount: argv[2] = "hdfs_space/"
> mount: external mount: argv[3] = "-v"
> mount: external mount: argv[4] = "-o"
> mount: external mount: argv[5] = "rw,sync,vers=3,sec=krb5,
> proto=tcp,nolock,noacl"
> mount.nfs: timeout set for Wed Aug 24 23:34:31 2016
> mount.nfs: trying text-based options 'vers=3,sec=krb5,proto=tcp,
> nolock,noacl,addr=10.115.22.109'
> mount.nfs: prog 100003, trying vers=3, prot=6
> mount.nfs: trying 10.115.22.109 prog 100003 vers 3 prot TCP port 2049
> mount.nfs: prog 100005, trying vers=3, prot=6
> mount.nfs: trying 10.115.22.109 prog 100005 vers 3 prot TCP port 4242
> *mount.nfs: mount(2): Permission denied*
> *mount.nfs: access denied by server while mounting gatewaymachine:/*
>
>
> Not sure why mount throwing permission issue .. Anybody faced this issue
> ??
>
>
> --Senthil
>
> On Thu, Aug 25, 2016 at 10:53 AM, Senthil Kumar <senthilec566@gmail.com>
> wrote:
>
>> Hi Team ,  As part of NFS Evaluation , i have installed NFS Gateway
>> Service in Secure Cluster ..
>>
>>
>> Config in Gateway Machine:
>> <property>
>>         <name>nfs.file.dump.dir</name>
>>         <value>/tmp/.hdfs-nfs</value>
>>    </property>
>>    <property>
>>         <name>nfs.keytab.file</name>
>>         <value>/etc/hadoop/hadoop.keytab</value>
>>    </property>
>>    <property>
>>         <name>nfs.kerberos.principal</name>
>>         <value>hadoop/_HOST@APD.XXXX.COM</value>
>>    </property>
>>
>>
>> NFS3 Service Started Successfully , but when i try to Mount the root /
>> directory it failed with below error ..
>>
>> WARN org.apache.hadoop.hdfs.nfs.nfs3.RpcProgramNfs3: Exception
>> org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.
>> security.authorize.AuthorizationException):
>> User root (auth:PROXY) via hadoop/phxdpehdc30dn0029.strat
>> us.phx.ebay.com@APD.EBAY.COM (auth:KERBEROS)
>>  is not authorized for protocol interface org.apache.hadoop.hdfs.protocol.ClientProtocol,
>> *expected client Kerberos principal is null*
>>
>>
>> mount command:
>> *mount *-t nfs -o vers=3,proto=tcp,nolock,noacl,sync gatewaymachine:/
>> hdfs_space/
>> *mount.nfs: mount system call failed*
>>
>>
>> What could be the issue here ??  I followed https://hadoop.apache
>> .org/docs/r2.7.2/hadoop-project-dist/hadoop-hdfs/HdfsNfsGateway.html
>> this documentation ..
>>
>>
>> --Senthil
>>
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message