[
https://issues.apache.org/jira/browse/HDDS-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiaoyu Yao updated HDDS-1190:
-----------------------------
Issue Type: Sub-task (was: Bug)
Parent: HDDS-4
> Fix jdk 11 issue for ozonesecure base image and docker-compose
> ---------------------------------------------------------------
>
> Key: HDDS-1190
> URL: https://issues.apache.org/jira/browse/HDDS-1190
> Project: Hadoop Distributed Data Store
> Issue Type: Sub-task
> Reporter: Xiaoyu Yao
> Assignee: Xiaoyu Yao
> Priority: Major
> Attachments: HDDS-1190-docker-hadoop-runner.001.patch,
> HDDS-1190-trunk.001.patch
>
>
> HDDS-1019 changes to use hadoop-runner as base image for ozonesecure
> docker-compose. There are a few issues that need to fixed.
>
> 1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume
> openjdk8 for JAVA_HOME.
>
> 2. The KEYTAB_DIR needs to be quoted with '.
>
> 3. keytab based login failed with Message stream modified (41), [~elek]
> mentioned in HDDS-1019 that we need to add max_renewable_life to
> "docker-image/docker-krb5/krb5.conf" like follows.
> [realms]
> EXAMPLE.COM = \{
> kdc = localhost
> admin_server = localhost
> max_renewable_life = 7d
> }
> Failures:
> {code}
> org.apache.hadoop.security.KerberosAuthException: failure to login: for
> principal: scm/s...@example.com from keytab /etc/security/keytabs/scm.keytab
> javax.security.auth.login.LoginException: Message stream modified (41)
> scm_1 | at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
> scm_1 |
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
