Hi Jon,
This is the app configuration. resources-default.json:
{
"schema" : "http://example.org/specification/v2.0.0";,
"metadata" : {
},
"global" : {
},
"components": {
"slider-appmaster": {
},
"SOLR": {
"yarn.role.priority": "1",
"yarn.component.instances": "2",
"yarn.memory": "1024"
}
}
}
and appConfig-default.json:
{
"schema": "http://example.org/specification/v2.0.0";,
"metadata": {
},
"global": {
"application.def": ".slider/package/solr/solr-on-yarn.zip",
"java_home": "/usr/lib/jvm/java-7-openjdk-amd64",
"site.global.app_root": "${AGENT_WORK_ROOT}/app/install/solr-5.2.1",
"site.global.zk_host": "zkNode:2181",
"site.global.solr_host": "${SOLR_HOST}",
"site.global.listen_port": "${SOLR.ALLOCATED_PORT}",
"site.global.xmx_val": "1g",
"site.global.xms_val": "1g",
"site.global.gc_tune": "-XX:NewRatio=3 -XX:SurvivorRatio=4
-XX:TargetSurvivorRatio=90 -XX:MaxTenuringThreshold=8
-XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:ConcGCThreads=4
-XX:ParallelGCThreads=4 -XX:+CMSScavengeBeforeRemark
-XX:PretenureSizeThreshold=64m -XX:+UseCMSInitiatingOccupancyOnly
-XX:CMSInitiatingOccupancyFraction=50 -XX:CMSMaxAbortablePrecleanTime=6000
-XX:+CMSParallelRemarkEnabled -XX:+ParallelRefProcEnabled -verbose:gc
-XX:+PrintHeapAtGC -XX:+PrintGCDetails -XX:+PrintGCDateStamps
-XX:+PrintTenuringDistribution -XX:+PrintGCApplicationStoppedTime",
"site.global.zk_timeout": "15000",
"site.global.server_module": "--module=http",
"site.global.stop_key": "solrrocks",
"site.global.solr_opts": ""
},
"components": {
"slider-appmaster": {
"jvm.heapsize": "512M"
},
"SOLR": {
}
}
}
I have tried both, having the properties in slider-client/server.xml and in
the hadoop conf directory. In any case the cluster is unsecure.
Ps: I'm using the instructions in
https://github.com/apache/incubator-slider/tree/develop/app-packages/solr
Thanks,
Nicolas
On Tue, Feb 21, 2017 at 2:25 PM, jonma...@gmail.com <jonma...@gmail.com>
wrote:
>
> Can you provide your app config file? Perhaps the combination of
> properties you've specified is triggering an attempt to connect securely?
> Are you specifiying the client properties in slider-client.xml or pointint
> to the hadoop conf directory? If the latter, are you certain that hadoop
> authentication is not specified as kerberos?
>
> On Tue, Feb 21, 2017 at 5:04 AM, Nicolás Velásquez O. <gnico...@gmail.com>
> wrote:
>
> > Hi again,
> > I'm trying to run solr via apache slider on an insecure mapr cluster,
but
> > for some reason the slider app is trying to use kerberos to authenticate
> > against the zookeeper. I am using a standalone zookeeper (tried versions
> > 3.4.6 and 3.4.9). This is the error I see on slider:
> > java.security.PrivilegedActionException: javax.security.sasl.
> > SaslException:
> > Failure to initialize security context [Caused by GSSException: Invalid
> > name provided (Mechanism level: KrbException: Cannot locate default
realm)]
> > at java.security.AccessController.doPrivileged(Native Method)
> > at javax.security.auth.Subject.doAs(Subject.java:415)
> > at
> > org.apache.zookeeper.client.ZooKeeperSaslClient.createSaslClient(
> > ZooKeeperSaslClient.java:283)
> > at
> > org.apache.zookeeper.client.ZooKeeperSaslClient.<init>(
> > ZooKeeperSaslClient.java:131)
> > at
> > org.apache.zookeeper.ClientCnxn$SendThread.startConnect(ClientCnxn.java:
> > 949)
> > at org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1003)
> > Caused by: javax.security.sasl.SaslException: Failure to initialize
> > security context [Caused by GSSException: Invalid name provided
(Mechanism
> > level: KrbException: Cannot locate default realm)]
> > at
> >
com.sun.security.sasl.gsskerb.GssKrb5Client.<init>(GssKrb5Client.java:149)
> > at
> > com.sun.security.sasl.gsskerb.FactoryImpl.createSaslClient(
> > FactoryImpl.java:63)
> > at javax.security.sasl.Sasl.createSaslClient(Sasl.java:372)
> > at
> > org.apache.zookeeper.client.ZooKeeperSaslClient$1.run(
> > ZooKeeperSaslClient.java:288)
> > at
> > org.apache.zookeeper.client.ZooKeeperSaslClient$1.run(
> > ZooKeeperSaslClient.java:283)
> > ... 6 more
> > Caused by: GSSException: Invalid name provided (Mechanism level:
> > KrbException: Cannot locate default realm)
> > at
> > sun.security.jgss.krb5.Krb5NameElement.getInstance(
> > Krb5NameElement.java:129)
> > at
> > sun.security.jgss.krb5.Krb5MechFactory.getNameElement(
> > Krb5MechFactory.java:95)
> > at sun.security.jgss.GSSManagerImpl.getNameElement(
> > GSSManagerImpl.java:202)
> > at sun.security.jgss.GSSNameImpl.getElement(GSSNameImpl.java:476)
> > at sun.security.jgss.GSSNameImpl.init(GSSNameImpl.java:201)
> > at sun.security.jgss.GSSNameImpl.<init>(GSSNameImpl.java:170)
> > at sun.security.jgss.GSSManagerImpl.createName(GSSManagerImpl.java:137)
> > at
> >
com.sun.security.sasl.gsskerb.GssKrb5Client.<init>(GssKrb5Client.java:107)
> >
> > This is the relevant log part on the zookeeper:
> > 2017-02-21 10:47:57,053 [myid:] - INFO [NIOServerCxn.Factory:
> > 0.0.0.0/0.0.0.0:2181:ZooKeeperServer@928] - Client attempting to
establish
> > new session at /172.31.3.3:57138
> > 2017-02-21 10:47:57,058 [myid:] - INFO [SyncThread:0:FileTxnLog@203] -
> > Creating new log file: log.1
> > 2017-02-21 10:47:57,112 [myid:] - INFO [SyncThread:0:ZooKeeperServer@673
]
> > -
> > Established session 0x15a6010d8260000 with negotiated timeout 40000 for
> > client /172.31.3.3:57138
> > 2017-02-21 10:48:02,138 [myid:] - WARN [NIOServerCxn.Factory:
> > 0.0.0.0/0.0.0.0:2181:NIOServerCnxn@357] - caught end of stream exception
> > EndOfStreamException: Unable to read additional data from client
sessionid
> > 0x15a6010d8260000, likely client has closed socket
> > at
org.apache.zookeeper.server.NIOServerCnxn.doIO(NIOServerCnxn.java:228)
> > at
> > org.apache.zookeeper.server.NIOServerCnxnFactory.run(
> > NIOServerCnxnFactory.java:203)
> > at java.lang.Thread.run(Thread.java:745)
> > 2017-02-21 10:48:02,143 [myid:] - INFO [NIOServerCxn.Factory:
> > 0.0.0.0/0.0.0.0:2181:NIOServerCnxn@1008] - Closed socket connection for
> > client /172.31.3.3:57138 which had sessionid 0x15a6010d8260000
> > 2017-02-21 10:48:38,000 [myid:] - INFO
[SessionTracker:ZooKeeperServer@358
> > ]
> > - Expiring session 0x15a6010d8260000, timeout of 40000ms exceeded
> > 2017-02-21 10:48:38,001 [myid:] - INFO [ProcessThread(sid:0
> > cport:2181)::PrepRequestProcessor@487] - Processed session termination
for
> > sessionid: 0x15a6010d8260000
> >
> > I searched but couldn't find a way to tell slider that it is connecting
to
> > an insecure cluster. Any input is greatly appreciated!
> >
> > Thanks,
> > Nicolas
> >
>
>
>
> --
> Sent from some random computer....
--
Nicolás Velásquez O.
Mobile +41.767189348
