Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@hadoop.apache.org
Received-SPF: pass (nike.apache.org: domain of amalgjos@gmail.com designates
 209.85.210.171 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <3bfead81.77e752.13e5796f752.Webtop.43@charter.net>
References: <3bfead81.77e752.13e5796f752.Webtop.43@charter.net>
Date: Sat, 11 May 2013 01:02:30 +0530
Message-ID: 
 <CAHr4Datp+h2X5qhy+ZOoy7+XFJvTvBoGZXOh1K6-_C=Hqk4hsQ@mail.gmail.com>
Subject: Re: Permissions
From: Amal G Jose <amalgjos@gmail.com>
To: user@hadoop.apache.org
Content-Type: multipart/alternative; boundary=20cf303bfb62561ac804dc623a0f

--20cf303bfb62561ac804dc623a0f
Content-Type: text/plain; charset=ISO-8859-1

After starting the hdfs, ie NN, SN and DN, create an hdfs directory
structure in the form /<hadoop.tmp.dir>/mapred/staging.
Then give 777 permission to staging. After that change the ownership of
mapred directory to mapred user.
After doing this start jobtracker, it will start. Otherwise, it will not
start.
The reason for not showing any datanodes may be due to firewall. Check
whether the necessary ports are open.


On Tue, Apr 30, 2013 at 2:28 AM, <rkevinburton@charter.net> wrote:

> I look in the name node log and I get the following errors:
>
> 2013-04-29 15:25:11,646 ERROR
> org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
> as:mapred (auth:SIMPLE)
> cause:org.apache.hadoop.security.AccessControlException: Permission denied:
> *user=mapred*, access=WRITE, inode="/":hdfs:supergroup:drwxr-xr-x
>
> 2013-04-29 15:25:11,646 INFO org.apache.hadoop.ipc.Server: IPC Server
> handler 6 on 9000, call
> org.apache.hadoop.hdfs.protocol.ClientProtocol.mkdirs from
> 172.16.26.68:45044: error:
> org.apache.hadoop.security.AccessControlException: Permission denied: *
> user=mapred*, access=WRITE, inode="/":hdfs:supergroup:drwxr-xr-x
> org.apache.hadoop.security.AccessControlException: Permission denied: *
> user=mapred,* access=WRITE, inode="/":hdfs:supergroup:drwxr-xr-x
>         at
> org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker.java:205)
>         at
> org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker.java:186)
>
> When I create the file system I have the user hdfs on the root folder.
> (/). I am not sure now to have both the user mapred and hdfs have access to
> the root (which it seems these errors are indicating).
>
> I get a page from 50070 put when I try to browse the filesystem from the
> web UI I get an error that there are no nodes listening (I have 3 data
> nodes and 1 namenode). The browser indicates that there is nothing
> listening to port 50030, so it seems that the JobTracker is not up.
>

--20cf303bfb62561ac804dc623a0f
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">After starting the hdfs, ie NN, SN and DN, create an hdfs =
directory structure in the form /&lt;hadoop.tmp.dir&gt;/mapred/staging.<div=
 style>Then give 777 permission to staging. After that change the ownership=
 of mapred directory to mapred user.</div>
<div style>After doing this start jobtracker, it will start. Otherwise, it =
will not start.</div><div style>The reason for not showing any datanodes ma=
y be due to firewall. Check whether the necessary ports are open.</div>
<div style><br></div></div><div class=3D"gmail_extra"><br><br><div class=3D=
"gmail_quote">On Tue, Apr 30, 2013 at 2:28 AM,  <span dir=3D"ltr">&lt;<a hr=
ef=3D"mailto:rkevinburton@charter.net" target=3D"_blank">rkevinburton@chart=
er.net</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div align=3D"LEFT"><font face=3D"Verdana" c=
olor=3D"#000000">I look in the name node log and I get the following errors=
:</font></div>
<font face=3D"Verdana" color=3D"#000000"><br></font><div align=3D"LEFT"><fo=
nt face=3D"Verdana" color=3D"#000000">2013-04-29 15:25:11,646 ERROR org.apa=
che.hadoop.security.UserGroupInformation: PriviledgedActionException as:map=
red (auth:SIMPLE) cause:org.apache.hadoop.security.AccessControlException: =
Permission denied: <b>user=3Dmapred</b>, access=3DWRITE, inode=3D&quot;/&qu=
ot;:hdfs:supergroup:drwxr-xr-x</font></div>
<font face=3D"Verdana" color=3D"#000000"><br></font><div align=3D"LEFT"><fo=
nt face=3D"Verdana" color=3D"#000000">2013-04-29 15:25:11,646 INFO org.apac=
he.hadoop.ipc.Server: IPC Server handler 6 on 9000, call org.apache.hadoop.=
hdfs.protocol.ClientProtocol.mkdirs from <a href=3D"http://172.16.26.68:450=
44" target=3D"_blank">172.16.26.68:45044</a>: error: org.apache.hadoop.secu=
rity.AccessControlException: Permission denied: <b>user=3Dmapred</b>, acces=
s=3DWRITE, inode=3D&quot;/&quot;:hdfs:supergroup:drwxr-xr-x</font></div>
<div align=3D"LEFT"><font face=3D"Verdana" color=3D"#000000">org.apache.had=
oop.security.AccessControlException: Permission denied: <b>user=3Dmapred,</=
b>=A0access=3DWRITE, inode=3D&quot;/&quot;:hdfs:supergroup:drwxr-xr-x</font=
></div><div align=3D"LEFT">
<font face=3D"Verdana" color=3D"#000000">=A0=A0=A0=A0=A0=A0=A0 at org.apach=
e.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker=
.java:205)</font></div><div align=3D"LEFT"><font face=3D"Verdana" color=3D"=
#000000">=A0=A0=A0=A0=A0=A0=A0 at org.apache.hadoop.hdfs.server.namenode.FS=
PermissionChecker.check(FSPermissionChecker.java:186)</font></div>
<font face=3D"Verdana" color=3D"#000000"><br></font><div align=3D"LEFT"><fo=
nt face=3D"Verdana" color=3D"#000000">When I create the file system I have =
the user hdfs on the root folder. (/). I am not sure now to have both the u=
ser mapred and hdfs have access to the root (which it seems these errors ar=
e indicating).</font></div>
<font face=3D"Verdana" color=3D"#000000"><br></font><div align=3D"LEFT"><fo=
nt face=3D"Verdana" color=3D"#000000">I get a page from 50070 put when I tr=
y to browse the filesystem from the web UI I get an error that there are no=
 nodes listening (I have 3 data nodes and 1 namenode). The browser indicate=
s that there is nothing listening to port 50030, so it seems that the JobTr=
acker is not up.</font></div>
</blockquote></div><br></div>

--20cf303bfb62561ac804dc623a0f--