Mailing-List: contact hdfs-dev-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
MIME-Version: 1.0
In-Reply-To: <CA+xmZH24+kGhQhPgSxzzB5uG_cp+O5SW9h4NkUi6vMuKWL1Gxw@mail.gmail.com>
References: <CA+xmZH24+kGhQhPgSxzzB5uG_cp+O5SW9h4NkUi6vMuKWL1Gxw@mail.gmail.com>
From: Senthil Kumar <senthilec566@gmail.com>
Date: Thu, 25 Aug 2016 12:07:13 +0530
Message-ID: <CA+xmZH0CbVyQGcfCt=Tw8rhYsQCehgu-jF_xXnWs+mfyJ8fSZw@mail.gmail.com>
Subject: Re: NFS Gateway - Secure Cluster - Mount Failed
To: hdfs-dev@hadoop.apache.org
Cc: Senthil kumar <senthilec566@gmail.com>
Content-Type: multipart/alternative; boundary=94eb2c190b56d559f9053adfa0b5
archived-at: Thu, 25 Aug 2016 06:37:20 -0000

--94eb2c190b56d559f9053adfa0b5
Content-Type: text/plain; charset=UTF-8

Expected Client Kerberos Principle is null issue resolved now .. Added
sec=krb5 option while mounting ..

mount -vvv -t nfs -o vers=3,*sec=krb5*,proto=tcp,nolock,noacl,sync
gateway:/ hdfs_space/


mount: fstab path: "/etc/fstab"
mount: mtab path:  "/etc/mtab"
mount: lock path:  "/etc/mtab~"
mount: temp path:  "/etc/mtab.tmp"
mount: UID:        0
mount: eUID:       0
mount: spec:  "gatewaymachine:/"
mount: node:  "hdfs_space/"
mount: types: "nfs"
mount: opts:  "vers=3,sec=krb5,proto=tcp,nolock,noacl,sync"
final mount options: 'vers=3,sec=krb5,proto=tcp,nolock,noacl'
mount: external mount: argv[0] = "/sbin/mount.nfs"
mount: external mount: argv[1] = "gatewaymachine:/"
mount: external mount: argv[2] = "hdfs_space/"
mount: external mount: argv[3] = "-v"
mount: external mount: argv[4] = "-o"
mount: external mount: argv[5] =
"rw,sync,vers=3,sec=krb5,proto=tcp,nolock,noacl"
mount.nfs: timeout set for Wed Aug 24 23:34:31 2016
mount.nfs: trying text-based options
'vers=3,sec=krb5,proto=tcp,nolock,noacl,addr=10.115.22.109'
mount.nfs: prog 100003, trying vers=3, prot=6
mount.nfs: trying 10.115.22.109 prog 100003 vers 3 prot TCP port 2049
mount.nfs: prog 100005, trying vers=3, prot=6
mount.nfs: trying 10.115.22.109 prog 100005 vers 3 prot TCP port 4242
*mount.nfs: mount(2): Permission denied*
*mount.nfs: access denied by server while mounting gatewaymachine:/*


Not sure why mount throwing permission issue .. Anybody faced this issue ??


--Senthil

On Thu, Aug 25, 2016 at 10:53 AM, Senthil Kumar <senthilec566@gmail.com>
wrote:

> Hi Team ,  As part of NFS Evaluation , i have installed NFS Gateway
> Service in Secure Cluster ..
>
>
> Config in Gateway Machine:
> <property>
>         <name>nfs.file.dump.dir</name>
>         <value>/tmp/.hdfs-nfs</value>
>    </property>
>    <property>
>         <name>nfs.keytab.file</name>
>         <value>/etc/hadoop/hadoop.keytab</value>
>    </property>
>    <property>
>         <name>nfs.kerberos.principal</name>
>         <value>hadoop/_HOST@APD.XXXX.COM</value>
>    </property>
>
>
> NFS3 Service Started Successfully , but when i try to Mount the root /
> directory it failed with below error ..
>
> WARN org.apache.hadoop.hdfs.nfs.nfs3.RpcProgramNfs3: Exception
> org.apache.hadoop.ipc.RemoteException(org.apache.
> hadoop.security.authorize.AuthorizationException):
> User root (auth:PROXY) via hadoop/phxdpehdc30dn0029.
> stratus.phx.ebay.com@APD.EBAY.COM (auth:KERBEROS)
>  is not authorized for protocol interface org.apache.hadoop.hdfs.protocol.ClientProtocol,
> *expected client Kerberos principal is null*
>
>
> mount command:
> *mount *-t nfs -o vers=3,proto=tcp,nolock,noacl,sync gatewaymachine:/
> hdfs_space/
> *mount.nfs: mount system call failed*
>
>
> What could be the issue here ??  I followed https://hadoop.
> apache.org/docs/r2.7.2/hadoop-project-dist/hadoop-hdfs/HdfsNfsGateway.html
> this documentation ..
>
>
> --Senthil
>

--94eb2c190b56d559f9053adfa0b5--