hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Enis Soztutar (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-4506) HDFS short circuit fails non-transparently when user does not have unix permissions
Date Tue, 19 Feb 2013 20:05:13 GMT

    [ https://issues.apache.org/jira/browse/HDFS-4506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13581579#comment-13581579
] 

Enis Soztutar commented on HDFS-4506:
-------------------------------------

I've tested this with hadoop-1.1.2-rc5. 
To repro, you can do smt like this: 
 - start hadoop with user hadoop. configure short circuit reads for user hbase. 
{code}
<property>
        <name>dfs.block.local-path-access.user</name>
        <value>hbase</value>
    </property>
{code}
 - configure hbase to use shortcircuit. 
{code}
<property>
    <name>dfs.client.read.shortcircuit</name>
    <value>true</value>
  </property>
{code}
 - ensure that user "hbase" does not have access perms to local block files. 
{code}
$ su - hadoop
$ chmod 700 -R ${dfs.data.dir}
$ su - hbase
$ ls -la /tmp/hadoop-enis/dfs/data/current/
ls: cannot open directory /tmp/hadoop-enis/dfs/data/current/: Permission denied
{code}
- start hbase in local mode. 

I think from inspecting the logs, the problem is that we catch the IOE in DFSClient.blockSeekTo(),
but not in fetchBlockByteRange(). When we get ACE, we disable shortCircuit reads, but not
on IOE, which also causes us to retry again and again to read locally. 

                
> HDFS short circuit fails non-transparently when user does not have unix permissions
> -----------------------------------------------------------------------------------
>
>                 Key: HDFS-4506
>                 URL: https://issues.apache.org/jira/browse/HDFS-4506
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: hdfs-client
>    Affects Versions: 1.1.1
>            Reporter: Enis Soztutar
>
> We found a case, where if the short circuit user name is configured correctly, but the
user does not have enough permissions in unix, DFS operations fails with IOException, rather
than silently failing over through datanode. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message