[
https://issues.apache.org/jira/browse/RANGER-399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14495757#comment-14495757
]
robinlin edited comment on RANGER-399 at 4/15/15 6:53 AM:
----------------------------------------------------------
Thanks for your reply.
But there is another problem.
I have created a user "hadoop" with password "hadoop" in Kerberos.
When I test connection, it gives me the following error message.
{noformat}
2015-04-15 02:40:56,635 [http-bio-6080-exec-10] INFO
com.xasecure.hadoop.client.config.BaseClient (BaseClient.java:101) - Init
Login: using username/password
2015-04-15 02:40:56,823 [http-bio-6080-exec-10] ERROR com.xasecure.biz.AssetMgr
(AssetMgr.java:1682) - Unable to connect repository with given config for
cluster_hadoop
com.xasecure.hadoop.client.exceptions.HadoopException: listFilesInternal:
Unable to get listing of files for directory /] from Hadoop environment
[cluster_hadoop].
at
com.xasecure.hadoop.client.HadoopFS.listFilesInternal(HadoopFS.java:113)
at com.xasecure.hadoop.client.HadoopFS.access$000(HadoopFS.java:44)
at com.xasecure.hadoop.client.HadoopFS$1.run(HadoopFS.java:139)
at com.xasecure.hadoop.client.HadoopFS$1.run(HadoopFS.java:136)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:356)
at com.xasecure.hadoop.client.HadoopFS.listFiles(HadoopFS.java:143)
at com.xasecure.hadoop.client.HadoopFS.testConnection(HadoopFS.java:176)
at com.xasecure.biz.AssetMgr.testConfig(AssetMgr.java:1624)
at com.xasecure.rest.AssetREST.testConfig(AssetREST.java:163)
at
com.xasecure.rest.AssetREST$$FastClassByCGLIB$$90363ab.invoke(<generated>)
at net.sf.cglib.proxy.MethodProxy.invoke(MethodProxy.java:191)
at
org.springframework.aop.framework.Cglib2AopProxy$CglibMethodInvocation.invokeJoinpoint(Cglib2AopProxy.java:689)
...
Caused by: java.io.IOException: Failed on local exception: java.io.IOException:
Couldn't set up IO streams; Host Details : local host is:
"allinone/140.92.25.44"; destination host is: "allinone":8020;
at org.apache.hadoop.net.NetUtils.wrapException(NetUtils.java:772)
...
at
org.apache.hadoop.fs.FileSystemLinkResolver.resolve(FileSystemLinkResolver.java:81)
at
org.apache.hadoop.hdfs.DistributedFileSystem.listStatus(DistributedFileSystem.java:751)
at
com.xasecure.hadoop.client.HadoopFS.listFilesInternal(HadoopFS.java:77)
... 86 more
Caused by: java.io.IOException: Couldn't set up IO streams
at
org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:786)
at org.apache.hadoop.ipc.Client$Connection.access$2800(Client.java:368)
at org.apache.hadoop.ipc.Client.getConnection(Client.java:1521)
at org.apache.hadoop.ipc.Client.call(Client.java:1438)
... 106 more
Caused by: java.lang.NullPointerException
at
org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:726)
... 109 more
{noformat}
Here is the value of the attribute "config" in post data of action "test
connection"
{noformat}
{
"username": "hadoop",
"password": "hadoop",
"fs.default.name": "hdfs://allinone:8020",
"hadoop.security.authorization": "false",
"hadoop.security.authentication": "kerberos",
"hadoop.security.auth_to_local": "RULE:[2:$1@$0]([rn]m@.*)s/.*/yarn/
RULE:[2:$1@$0](jhs@.*)s/.*/mapred/ RULE:[2:$1@$0]([nd]n@.*)s/.*/hdfs/
RULE:[2:$1@$0](hm@.*)s/.*/hbase/ RULE:[2:$1@$0](rs@.*)s/.*/hbase/
DEFAULT",
"dfs.datanode.kerberos.principal": "dn/[email protected]",
"dfs.namenode.kerberos.principal": "nn/[email protected]",
"dfs.secondary.namenode.kerberos.principal": "nn/[email protected]",
"hadoop.rpc.protection": "-",
"commonNameForCertificate": "-"
}
{noformat}
was (Author: robinlin):
Thanks for your reply.
But there is another problem.
I have created a user "hadoop" with password "hadoop" in Kerberos.
When I test connection, it gives me the following error message.
{noformat}
2015-04-15 02:40:56,635 [http-bio-6080-exec-10] INFO
com.xasecure.hadoop.client.config.BaseClient (BaseClient.java:101) - Init
Login: using username/password
2015-04-15 02:40:56,823 [http-bio-6080-exec-10] ERROR com.xasecure.biz.AssetMgr
(AssetMgr.java:1682) - Unable to connect repository with given config for
cluster_hadoop
com.xasecure.hadoop.client.exceptions.HadoopException: listFilesInternal:
Unable to get listing of files for directory /] from Hadoop environment
[cluster_hadoop].
at
com.xasecure.hadoop.client.HadoopFS.listFilesInternal(HadoopFS.java:113)
at com.xasecure.hadoop.client.HadoopFS.access$000(HadoopFS.java:44)
at com.xasecure.hadoop.client.HadoopFS$1.run(HadoopFS.java:139)
at com.xasecure.hadoop.client.HadoopFS$1.run(HadoopFS.java:136)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:356)
at com.xasecure.hadoop.client.HadoopFS.listFiles(HadoopFS.java:143)
at com.xasecure.hadoop.client.HadoopFS.testConnection(HadoopFS.java:176)
at com.xasecure.biz.AssetMgr.testConfig(AssetMgr.java:1624)
at com.xasecure.rest.AssetREST.testConfig(AssetREST.java:163)
at
com.xasecure.rest.AssetREST$$FastClassByCGLIB$$90363ab.invoke(<generated>)
at net.sf.cglib.proxy.MethodProxy.invoke(MethodProxy.java:191)
at
org.springframework.aop.framework.Cglib2AopProxy$CglibMethodInvocation.invokeJoinpoint(Cglib2AopProxy.java:689)
{noformat}
Here is the value of the attribute "config" in post data of action "test
connection"
{noformat}
{
"username": "hadoop",
"password": "hadoop",
"fs.default.name": "hdfs://allinone:8020",
"hadoop.security.authorization": "false",
"hadoop.security.authentication": "kerberos",
"hadoop.security.auth_to_local": "RULE:[2:$1@$0]([rn]m@.*)s/.*/yarn/
RULE:[2:$1@$0](jhs@.*)s/.*/mapred/ RULE:[2:$1@$0]([nd]n@.*)s/.*/hdfs/
RULE:[2:$1@$0](hm@.*)s/.*/hbase/ RULE:[2:$1@$0](rs@.*)s/.*/hbase/
DEFAULT",
"dfs.datanode.kerberos.principal": "dn/[email protected]",
"dfs.namenode.kerberos.principal": "nn/[email protected]",
"dfs.secondary.namenode.kerberos.principal": "nn/[email protected]",
"hadoop.rpc.protection": "-",
"commonNameForCertificate": "-"
}
{noformat}
> Testing connection at a Kerberized cluster
> ------------------------------------------
>
> Key: RANGER-399
> URL: https://issues.apache.org/jira/browse/RANGER-399
> Project: Ranger
> Issue Type: Bug
> Components: admin
> Affects Versions: 0.4.1
> Environment: any
> Reporter: robinlin
> Assignee: Ramesh Mani
>
> Hi all
> The connection testing seems malfunctioned in a Kerberized Cluster.
> Such as HDFS repository, when I traced the source code, I found it needs the
> path of keytab, but there is no place to specify the path on the web ui.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
