hadoop-mapreduce-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From li.j...@gmail.com
Subject Re: Secondary name node error in checkpoint with Kerberos enabled
Date Fri, 03 Jan 2014 13:23:54 GMT
13201614174
Qdfdhsgdgshagsydyffg
As sfgswzv
Fftdtf


发自我的 iPad

> 在 佛历2557年1月1日,上午6:59,Manoj Samel <manoj.samel@gmail.com> 写道:
> 
> * Name node and secondary name nodes on different machines
> * Kerberos was just enabled
> * Cloudera CDH 4.5 on Centos
> 
> Secondary name node log (HOST2) shows following
> 
> 
> 2013-12-31 22:00:11,728 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS) cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException:
Image transfer servlet at http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235
failed with status code 403
> Response message:
> Only Namenode, Secondary Namenode, and administrators may access this servlet
> 
> Name Node Log (HOST1) shows following
> 
> 2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful
for hdfs/2NN-host@REALM (auth:SIMPLE)
> 2013-12-31 21:59:56,213 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager:
Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol
> 
> ...
> 2013-12-31 21:59:56,612 INFO org.apache.hadoop.hdfs.server.namenode.GetImageServlet:
GetImageServlet rejecting: hdfs/2NN-host@REALM
> 2013-12-31 21:59:56,615 WARN org.apache.hadoop.hdfs.server.namenode.GetImageServlet:
Received non-NN/SNN/administrator request for image or edits from hdfs/2NN-host@REALM at 2NN-host-IP
> 
> 
> -- 
> Thanks,
> 
> Manoj

Mime
View raw message