Hi
When I configure the HDFS in secure mode I got
I coudn't get cause for the same.
Can anyone help me :)
My configuration related to security and security logs
2012-06-29 11:44:24,156 WARN org.mortbay.log: Failed startup of context
org.mortbay.jetty.webapp.WebAppContext@512d8ecd{/,file:/home/security/install/hadoop/namenode/share/hadoop/hdfs/webapps/hdfs}
javax.servlet.ServletException: javax.security.auth.login.LoginException: Null
Server Key
at
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:185)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:146)
at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:97)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at
org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:713)
at org.mortbay.jetty.servlet.Context.startContext(Context.java:140)
at
org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1282)
at
org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:518)
at
org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:499)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at
org.mortbay.jetty.handler.HandlerCollection.doStart(HandlerCollection.java:152)
at
org.mortbay.jetty.handler.ContextHandlerCollection.doStart(ContextHandlerCollection.java:156)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at
org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:130)
at org.mortbay.jetty.Server.doStart(Server.java:224)
at
org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at org.apache.hadoop.http.HttpServer.start(HttpServer.java:617)
at
org.apache.hadoop.hdfs.server.namenode.NameNodeHttpServer.start(NameNodeHttpServer.java:173)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.startHttpServer(NameNode.java:540)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.startCommonServices(NameNode.java:482)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.initialize(NameNode.java:423)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:601)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.<init>(NameNode.java:582)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.createNameNode(NameNode.java:1143)
at
org.apache.hadoop.hdfs.server.namenode.NameNode.main(NameNode.java:1202)
Caused by: javax.security.auth.login.LoginException: Null Server Key
at
com.sun.security.auth.module.Krb5LoginModule.commit(Krb5LoginModule.java:965)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at
javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$5.run(LoginContext.java:706)
at java.security.AccessController.doPrivileged(Native Method)
at
javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginContext.java:703)
at javax.security.auth.login.LoginContext.login(LoginContext.java:576)
at
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:169)
... 24 more
Security.audit log
2012-06-29 11:37:47,019 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth
successful for abcd/had...@hadoop.com (auth:SIMPLE)
2012-06-29 11:37:47,069 INFO
SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager:
Authorization successful for abcd/had...@hadoop.com (auth:KERBEROS) for
protocol=interface org.apache.hadoop.hdfs.server.protocol.DatanodeProtocol
<property>
<name>dfs.web.authentication.kerberos.principal</name>
<value>abcd/had...@hadoop.com</value>
</property>
<property>
<name>dfs.web.authentication.kerberos.keytab</name>
<value>/abcd.keytab</value>
</property>
Thanks and Regards
Amith
