Ted Yu created HBASE-10857: ------------------------------ Summary: clear_auths command gives exception on existing label and user Key: HBASE-10857 URL: https://issues.apache.org/jira/browse/HBASE-10857 Project: HBase Issue Type: Bug Affects Versions: 0.98.0 Reporter: Ted Yu
As user hbase, I performed the following: {code} hbase(main):001:0> set_auths 'oozie', [ 'TOP_SECRET' ] SLF4J: Class path contains multiple SLF4J bindings. SLF4J: Found binding in [jar:file:/usr/lib/hadoop/lib/slf4j-log4j12-1.7.5.jar!/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: Found binding in [jar:file:/usr/lib/zookeeper/lib/slf4j-log4j12-1.6.1.jar!/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation. 2014-03-27 22:35:44,312 WARN [main] conf.Configuration: hbase-site.xml:an attempt to override final parameter: dfs.support.append; Ignoring. 0 row(s) in 2.6000 seconds hbase(main):002:0> scan 'hbase:labels' ROW COLUMN+CELL \x00\x00\x00\x01 column=f:\x00, timestamp=1395944796030, value=system \x00\x00\x00\x01 column=f:hbase, timestamp=1395944796030, value= \x00\x00\x00\x02 column=f:\x00, timestamp=1395951045442, value=TOP_SECRET \x00\x00\x00\x02 column=f:hrt_qa, timestamp=1395951229682, value= \x00\x00\x00\x02 column=f:hrt_qa1, timestamp=1395951270297, value= \x00\x00\x00\x02 column=f:mapred, timestamp=1395958442326, value= \x00\x00\x00\x02 column=f:oozie, timestamp=1395959745422, value= \x00\x00\x00\x03 column=f:\x00, timestamp=1395952069731, value=TOP_TOP_SECRET \x00\x00\x00\x03 column=f:mapred, timestamp=1395956032141, value= 3 row(s) in 0.0620 seconds {code} However, clear_auths command gave me: {code} hbase(main):003:0> clear_auths 'oozie', [ 'TOP_SECRET' ] SLF4J: Class path contains multiple SLF4J bindings. SLF4J: Found binding in [jar:file:/usr/lib/hadoop/lib/slf4j-log4j12-1.7.5.jar!/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: Found binding in [jar:file:/usr/lib/zookeeper/lib/slf4j-log4j12-1.6.1.jar!/org/slf4j/impl/StaticLoggerBinder.class] SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation. ERROR: org.apache.hadoop.hbase.security.visibility.InvalidLabelException: Label 'TOP_SECRET' is not set for the user oozie at org.apache.hadoop.hbase.security.visibility.VisibilityController.clearAuths(VisibilityController.java:1304) at org.apache.hadoop.hbase.protobuf.generated.VisibilityLabelsProtos$VisibilityLabelsService$1.clearAuths(VisibilityLabelsProtos.java:5030) at org.apache.hadoop.hbase.protobuf.generated.VisibilityLabelsProtos$VisibilityLabelsService.callMethod(VisibilityLabelsProtos.java:5188) at org.apache.hadoop.hbase.regionserver.HRegion.execService(HRegion.java:5518) at org.apache.hadoop.hbase.regionserver.HRegionServer.execService(HRegionServer.java:3299) at org.apache.hadoop.hbase.protobuf.generated.ClientProtos$ClientService$2.callBlockingMethod(ClientProtos.java:28865) at org.apache.hadoop.hbase.ipc.RpcServer.call(RpcServer.java:2008) at org.apache.hadoop.hbase.ipc.CallRunner.run(CallRunner.java:92) at org.apache.hadoop.hbase.ipc.SimpleRpcScheduler.consumerLoop(SimpleRpcScheduler.java:160) at org.apache.hadoop.hbase.ipc.SimpleRpcScheduler.access$000(SimpleRpcScheduler.java:38) at org.apache.hadoop.hbase.ipc.SimpleRpcScheduler$1.run(SimpleRpcScheduler.java:110) {code} -- This message was sent by Atlassian JIRA (v6.2#6252)