hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hadoop QA (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-16663) JMX ConnectorServer stopped when unauthorized user try to stop HM/RS/cluster
Date Fri, 18 Nov 2016 18:46:58 GMT

    [ https://issues.apache.org/jira/browse/HBASE-16663?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15677425#comment-15677425
] 

Hadoop QA commented on HBASE-16663:
-----------------------------------

| (x) *{color:red}-1 overall{color}* |
\\
\\
|| Vote || Subsystem || Runtime || Comment ||
| {color:blue}0{color} | {color:blue} reexec {color} | {color:blue} 10m 44s {color} | {color:blue}
Docker mode activated. {color} |
| {color:green}+1{color} | {color:green} @author {color} | {color:green} 0m 0s {color} | {color:green}
The patch does not contain any @author tags. {color} |
| {color:green}+1{color} | {color:green} test4tests {color} | {color:green} 0m 0s {color}
| {color:green} The patch appears to include 1 new or modified test files. {color} |
| {color:green}+1{color} | {color:green} mvninstall {color} | {color:green} 1m 25s {color}
| {color:green} branch-1.1 passed {color} |
| {color:green}+1{color} | {color:green} compile {color} | {color:green} 0m 29s {color} |
{color:green} branch-1.1 passed with JDK v1.8.0_111 {color} |
| {color:green}+1{color} | {color:green} compile {color} | {color:green} 0m 33s {color} |
{color:green} branch-1.1 passed with JDK v1.7.0_80 {color} |
| {color:green}+1{color} | {color:green} checkstyle {color} | {color:green} 0m 21s {color}
| {color:green} branch-1.1 passed {color} |
| {color:green}+1{color} | {color:green} mvneclipse {color} | {color:green} 0m 16s {color}
| {color:green} branch-1.1 passed {color} |
| {color:red}-1{color} | {color:red} findbugs {color} | {color:red} 1m 48s {color} | {color:red}
hbase-server in branch-1.1 has 80 extant Findbugs warnings. {color} |
| {color:red}-1{color} | {color:red} javadoc {color} | {color:red} 0m 25s {color} | {color:red}
hbase-server in branch-1.1 failed with JDK v1.8.0_111. {color} |
| {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 0m 32s {color} |
{color:green} branch-1.1 passed with JDK v1.7.0_80 {color} |
| {color:red}-1{color} | {color:red} mvninstall {color} | {color:red} 0m 22s {color} | {color:red}
hbase-server in the patch failed. {color} |
| {color:red}-1{color} | {color:red} compile {color} | {color:red} 0m 18s {color} | {color:red}
hbase-server in the patch failed with JDK v1.8.0_111. {color} |
| {color:red}-1{color} | {color:red} javac {color} | {color:red} 0m 18s {color} | {color:red}
hbase-server in the patch failed with JDK v1.8.0_111. {color} |
| {color:red}-1{color} | {color:red} compile {color} | {color:red} 0m 23s {color} | {color:red}
hbase-server in the patch failed with JDK v1.7.0_80. {color} |
| {color:red}-1{color} | {color:red} javac {color} | {color:red} 0m 23s {color} | {color:red}
hbase-server in the patch failed with JDK v1.7.0_80. {color} |
| {color:green}+1{color} | {color:green} checkstyle {color} | {color:green} 0m 20s {color}
| {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} mvneclipse {color} | {color:green} 0m 16s {color}
| {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} whitespace {color} | {color:green} 0m 0s {color}
| {color:green} The patch has no whitespace issues. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 0m 51s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.4.0. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 1m 38s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.4.1. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 2m 26s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.5.0. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 3m 15s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.5.1. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 4m 2s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.5.2. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 4m 51s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.6.1. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 5m 41s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.6.2. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 6m 29s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.6.3. {color} |
| {color:red}-1{color} | {color:red} hadoopcheck {color} | {color:red} 7m 21s {color} | {color:red}
The patch causes 22 errors with Hadoop v2.7.1. {color} |
| {color:red}-1{color} | {color:red} hbaseprotoc {color} | {color:red} 0m 24s {color} | {color:red}
hbase-server in the patch failed. {color} |
| {color:red}-1{color} | {color:red} findbugs {color} | {color:red} 0m 22s {color} | {color:red}
hbase-server in the patch failed. {color} |
| {color:red}-1{color} | {color:red} javadoc {color} | {color:red} 0m 25s {color} | {color:red}
hbase-server in the patch failed with JDK v1.8.0_111. {color} |
| {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 0m 32s {color} |
{color:green} the patch passed with JDK v1.7.0_80 {color} |
| {color:red}-1{color} | {color:red} unit {color} | {color:red} 0m 23s {color} | {color:red}
hbase-server in the patch failed. {color} |
| {color:green}+1{color} | {color:green} asflicense {color} | {color:green} 0m 9s {color}
| {color:green} The patch does not generate ASF License warnings. {color} |
| {color:black}{color} | {color:black} {color} | {color:black} 28m 9s {color} | {color:black}
{color} |
\\
\\
|| Subsystem || Report/Notes ||
| Docker | Client=1.11.2 Server=1.11.2 Image:yetus/hbase:8012383 |
| JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/12839592/16663.branch-1.1.patch
|
| JIRA Issue | HBASE-16663 |
| Optional Tests |  asflicense  javac  javadoc  unit  findbugs  hadoopcheck  hbaseanti  checkstyle
 compile  |
| uname | Linux f90713ffa84d 3.13.0-36-lowlatency #63-Ubuntu SMP PREEMPT Wed Sep 3 21:56:12
UTC 2014 x86_64 x86_64 x86_64 GNU/Linux |
| Build tool | maven |
| Personality | /testptch/patchprocess/precommit/personality/hbase.sh |
| git revision | branch-1.1 / 7c58547 |
| Default Java | 1.7.0_80 |
| Multi-JDK versions |  /usr/lib/jvm/java-8-oracle:1.8.0_111 /usr/lib/jvm/java-7-oracle:1.7.0_80
|
| findbugs | v3.0.0 |
| findbugs | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/branch-findbugs-hbase-server-warnings.html
|
| javadoc | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/branch-javadoc-hbase-server-jdk1.8.0_111.txt
|
| mvninstall | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-mvninstall-hbase-server.txt
|
| compile | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-compile-hbase-server-jdk1.8.0_111.txt
|
| javac | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-compile-hbase-server-jdk1.8.0_111.txt
|
| compile | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-compile-hbase-server-jdk1.7.0_80.txt
|
| javac | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-compile-hbase-server-jdk1.7.0_80.txt
|
| hbaseprotoc | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-hbaseprotoc-hbase-server.txt
|
| findbugs | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-findbugs-hbase-server.txt
|
| javadoc | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-javadoc-hbase-server-jdk1.8.0_111.txt
|
| unit | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/artifact/patchprocess/patch-unit-hbase-server.txt
|
|  Test Results | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/testReport/ |
| modules | C: hbase-server U: hbase-server |
| Console output | https://builds.apache.org/job/PreCommit-HBASE-Build/4533/console |
| Powered by | Apache Yetus 0.3.0   http://yetus.apache.org |


This message was automatically generated.



> JMX ConnectorServer stopped when unauthorized user try to stop HM/RS/cluster
> ----------------------------------------------------------------------------
>
>                 Key: HBASE-16663
>                 URL: https://issues.apache.org/jira/browse/HBASE-16663
>             Project: HBase
>          Issue Type: Bug
>          Components: metrics, security
>            Reporter: Pankaj Kumar
>            Assignee: Pankaj Kumar
>            Priority: Critical
>             Fix For: 2.0.0, 1.3.0, 1.4.0, 1.2.4, 0.98.24, 1.1.8
>
>         Attachments: 16663-branch-1.1.00.patch, 16663.branch-1.1.patch, HBASE-16663-0.98-V4.patch,
HBASE-16663-0.98.patch, HBASE-16663-V2.patch, HBASE-16663-V3.patch, HBASE-16663-V4.patch,
HBASE-16663-branch-1.patch, HBASE-16663.patch
>
>
> After HBASE-16284, unauthorized user will not able allowed to stop HM/RS/cluster, but
while executing "cpHost.preStopMaster()", ConnectorServer will be stopped before AccessController
validation.
> hbase-site.xml,
> {noformat}
>  <property>
> 	<name>hbase.coprocessor.master.classes</name>
>         <value>org.apache.hadoop.hbase.JMXListener,org.apache.hadoop.hbase.security.access.AccessController</value>
>  </property>
>   <property>
> 	<name>hbase.coprocessor.regionserver.classes</name>
>         <value>org.apache.hadoop.hbase.JMXListener,org.apache.hadoop.hbase.security.access.AccessController</value>
>   </property>
> {noformat}
> HBaseAdmin.stopMaster(),
> {noformat}
> 2016-09-20 21:12:26,796 INFO  [RpcServer.FifoWFPBQ.priority.handler=19,queue=1,port=16000]
hbase.JMXListener: ConnectorServer stopped!
> 2016-09-20 21:13:55,380 WARN  [RpcServer.FifoWFPBQ.priority.handler=19,queue=1,port=16000]
security.ShellBasedUnixGroupsMapping: got exception trying to get groups for user P72981
> ExitCodeException exitCode=1: id: P72981: No such user
> 2016-09-20 21:14:00,495 ERROR [RpcServer.FifoWFPBQ.priority.handler=19,queue=1,port=16000]
master.MasterRpcServices: Exception occurred while stopping master
> org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for
user 'P72981' (global, action=ADMIN)
> 	at org.apache.hadoop.hbase.security.access.AccessController.requireGlobalPermission(AccessController.java:546)
> 	at org.apache.hadoop.hbase.security.access.AccessController.requirePermission(AccessController.java:522)
> 	at org.apache.hadoop.hbase.security.access.AccessController.preStopMaster(AccessController.java:1297)
> 	at org.apache.hadoop.hbase.master.MasterCoprocessorHost$68.call(MasterCoprocessorHost.java:821)
> 	at org.apache.hadoop.hbase.master.MasterCoprocessorHost.execOperation(MasterCoprocessorHost.java:1188)
> 	at org.apache.hadoop.hbase.master.MasterCoprocessorHost.preStopMaster(MasterCoprocessorHost.java:817)
> 	at org.apache.hadoop.hbase.master.HMaster.stopMaster(HMaster.java:2352)
> 	at org.apache.hadoop.hbase.master.MasterRpcServices.stopMaster(MasterRpcServices.java:1364)
> {noformat}
> HBaseAdmin.stopRegionServer(rs-host-port),
> {noformat}
> 2016-09-20 20:59:01,234 INFO  [RpcServer.FifoWFPBQ.priority.handler=18,queue=0,port=16020]
hbase.JMXListener: ConnectorServer stopped!
> 2016-09-20 20:59:01,250 WARN  [RpcServer.FifoWFPBQ.priority.handler=18,queue=0,port=16020]
security.ShellBasedUnixGroupsMapping: got exception trying to get groups for user P72981
> ExitCodeException exitCode=1: id: P72981: No such user
> 2016-09-20 20:59:01,253 WARN  [RpcServer.FifoWFPBQ.priority.handler=18,queue=0,port=16020]
regionserver.HRegionServer: The region server did not stop
> org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for
user 'P72981' (global, action=ADMIN)
> 	at org.apache.hadoop.hbase.security.access.AccessController.requireGlobalPermission(AccessController.java:546)
> 	at org.apache.hadoop.hbase.security.access.AccessController.requirePermission(AccessController.java:522)
> 	at org.apache.hadoop.hbase.security.access.AccessController.preStopRegionServer(AccessController.java:2501)
> 	at org.apache.hadoop.hbase.regionserver.RegionServerCoprocessorHost$1.call(RegionServerCoprocessorHost.java:84)
> 	at org.apache.hadoop.hbase.regionserver.RegionServerCoprocessorHost.execOperation(RegionServerCoprocessorHost.java:256)
> 	at org.apache.hadoop.hbase.regionserver.RegionServerCoprocessorHost.preStop(RegionServerCoprocessorHost.java:80)
> 	at org.apache.hadoop.hbase.regionserver.HRegionServer.stop(HRegionServer.java:1905)
> 	at org.apache.hadoop.hbase.regionserver.RSRpcServices.stopServer(RSRpcServices.java:1961)
> {noformat}
> HBaseAdmin.shutdown(),
> {noformat}
> 2016-09-21 12:09:08,259 INFO  [RpcServer.FifoWFPBQ.priority.handler=19,queue=1,port=16000]
master.MasterRpcServices: Client=P72981//10.18.248.96 shutdown
> 2016-09-21 12:09:08,261 INFO  [RpcServer.FifoWFPBQ.priority.handler=19,queue=1,port=16000]
hbase.JMXListener: ConnectorServer stopped!
> 2016-09-21 12:09:08,276 WARN  [RpcServer.FifoWFPBQ.priority.handler=19,queue=1,port=16000]
security.ShellBasedUnixGroupsMapping: got exception trying to get groups for user P72981
> ExitCodeException exitCode=1: id: P72981: No such user
> 2016-09-21 12:09:08,280 ERROR [RpcServer.FifoWFPBQ.priority.handler=19,queue=1,port=16000]
master.MasterRpcServices: Exception occurred in HMaster.shutdown()
> org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for
user 'P72981' (global, action=ADMIN)
> 	at org.apache.hadoop.hbase.security.access.AccessController.requireGlobalPermission(AccessController.java:546)
> 	at org.apache.hadoop.hbase.security.access.AccessController.requirePermission(AccessController.java:522)
> 	at org.apache.hadoop.hbase.security.access.AccessController.preShutdown(AccessController.java:1291)
> 	at org.apache.hadoop.hbase.master.MasterCoprocessorHost$67.call(MasterCoprocessorHost.java:806)
> 	at org.apache.hadoop.hbase.master.MasterCoprocessorHost.execOperation(MasterCoprocessorHost.java:1188)
> 	at org.apache.hadoop.hbase.master.MasterCoprocessorHost.preShutdown(MasterCoprocessorHost.java:802)
> 	at org.apache.hadoop.hbase.master.HMaster.shutdown(HMaster.java:2335)
> 	at org.apache.hadoop.hbase.master.MasterRpcServices.shutdown(MasterRpcServices.java:1322)
> 	at org.apache.hadoop.hbase.protobuf.generated.MasterProtos$MasterService$2.callBlockingMethod(MasterProtos.java:58551)
> 	at org.apache.hadoop.hbase.ipc.RpcServer.call(RpcServer.java:2270)
> 	at org.apache.hadoop.hbase.ipc.CallRunner.run(CallRunner.java:123)
> 	at org.apache.hadoop.hbase.ipc.RpcExecutor$Handler.run(RpcExecutor.java:188)
> 	at org.apache.hadoop.hbase.ipc.RpcExecutor$Handler.run(RpcExecutor.java:168)
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message