[ https://issues.apache.org/jira/browse/HADOOP-14969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16340451#comment-16340451 ]
Ajay Kumar commented on HADOOP-14969: ------------------------------------- [~xyao], thanks for review. Addressed your suggestions in patch v5. [~ste...@apache.org] Shall we address runtime to IOE conversion in separate jira as this jira is directed towards improving diagnostics? > Improve diagnostics in secure DataNode startup > ---------------------------------------------- > > Key: HADOOP-14969 > URL: https://issues.apache.org/jira/browse/HADOOP-14969 > Project: Hadoop Common > Issue Type: Improvement > Reporter: Ajay Kumar > Assignee: Ajay Kumar > Priority: Major > Attachments: HADOOP-14969.001.patch, HADOOP-14969.002.patch, > HADOOP-14969.003.patch, HADOOP-14969.004.patch, HADOOP-14969.005.patch > > > When DN secure mode configuration is incorrect, it throws the following > exception from Datanode#checkSecureConfig > {code} > private static void checkSecureConfig(DNConf dnConf, Configuration conf, > SecureResources resources) throws RuntimeException { > if (!UserGroupInformation.isSecurityEnabled()) { > return; > } > ... > throw new RuntimeException("Cannot start secure DataNode without " + > "configuring either privileged resources or SASL RPC data transfer " + > "protection and SSL for HTTP. Using privileged resources in " + > "combination with SASL RPC data transfer protection is not supported."); > {code} > The DN should print more useful diagnostics as to what exactly what went > wrong. > Also when starting secure DN with resources then the startup scripts should > launch the SecureDataNodeStarter class. If no SASL is configured and > SecureDataNodeStarter is not used, then we could mention that too. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org