[jira] [Updated] (HDDS-1190) Fix jdk 11 issue for ozonesecure base image and docker-compose
[
https://issues.apache.org/jira/browse/HDDS-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Elek, Marton updated HDDS-1190:
---
Resolution: Fixed
Status: Resolved (was: Patch Available)
Thanks the fix [~xyao]. I am committed both the patches.
FTR: I know about the remaining issues (non of them are java11 related):
1.) The hadoop:3 image is based on an older hadoop-runner. It doesn't container
your last two patches (and hadoop:3 is used for kms). I will create an empty
commit there to force the rebuild.
2.) the kdc image starts the mit kerberos components and the simple rest
application parallel. It's possible that the rest server will be started
earlier. In that case an invalid keytab will be downloaded by the clients. This
is fixed by the latest REST binary:
https://github.com/flokkr/issuer/releases/tag/1.0.2 We may need to upgrade to
that one.
> Fix jdk 11 issue for ozonesecure base image and docker-compose
> ---
>
> Key: HDDS-1190
> URL: https://issues.apache.org/jira/browse/HDDS-1190
> Project: Hadoop Distributed Data Store
> Issue Type: Sub-task
>Reporter: Xiaoyu Yao
>Assignee: Xiaoyu Yao
>Priority: Major
> Attachments: HDDS-1190-docker-hadoop-runner.001.patch,
> HDDS-1190-trunk.001.patch
>
>
> HDDS-1019 changes to use hadoop-runner as base image for ozonesecure
> docker-compose. There are a few issues that need to fixed.
>
> 1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume
> openjdk8 for JAVA_HOME.
>
> 2. The KEYTAB_DIR needs to be quoted with '.
>
> 3. keytab based login failed with Message stream modified (41), [~elek]
> mentioned in HDDS-1019 that we need to add max_renewable_life to
> "docker-image/docker-krb5/krb5.conf" like follows.
> [realms]
> EXAMPLE.COM = \{
> kdc = localhost
> admin_server = localhost
> max_renewable_life = 7d
> }
> Failures:
> {code}
> org.apache.hadoop.security.KerberosAuthException: failure to login: for
> principal: scm/s...@example.com from keytab /etc/security/keytabs/scm.keytab
> javax.security.auth.login.LoginException: Message stream modified (41)
> scm_1 | at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
> scm_1 |
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDDS-1190) Fix jdk 11 issue for ozonesecure base image and docker-compose
[
https://issues.apache.org/jira/browse/HDDS-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiaoyu Yao updated HDDS-1190:
-
Status: Patch Available (was: Open)
> Fix jdk 11 issue for ozonesecure base image and docker-compose
> ---
>
> Key: HDDS-1190
> URL: https://issues.apache.org/jira/browse/HDDS-1190
> Project: Hadoop Distributed Data Store
> Issue Type: Bug
>Reporter: Xiaoyu Yao
>Assignee: Xiaoyu Yao
>Priority: Major
> Attachments: HDDS-1190-docker-hadoop-runner.001.patch,
> HDDS-1190-trunk.001.patch
>
>
> HDDS-1019 changes to use hadoop-runner as base image for ozonesecure
> docker-compose. There are a few issues that need to fixed.
>
> 1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume
> openjdk8 for JAVA_HOME.
>
> 2. The KEYTAB_DIR needs to be quoted with '.
>
> 3. keytab based login failed with Message stream modified (41), [~elek]
> mentioned in HDDS-1019 that we need to add max_renewable_life to
> "docker-image/docker-krb5/krb5.conf" like follows.
> [realms]
> EXAMPLE.COM = \{
> kdc = localhost
> admin_server = localhost
> max_renewable_life = 7d
> }
> Failures:
> {code}
> org.apache.hadoop.security.KerberosAuthException: failure to login: for
> principal: scm/s...@example.com from keytab /etc/security/keytabs/scm.keytab
> javax.security.auth.login.LoginException: Message stream modified (41)
> scm_1 | at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
> scm_1 |
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDDS-1190) Fix jdk 11 issue for ozonesecure base image and docker-compose
[
https://issues.apache.org/jira/browse/HDDS-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiaoyu Yao updated HDDS-1190:
-
Attachment: HDDS-1190-docker-hadoop-runner.001.patch
> Fix jdk 11 issue for ozonesecure base image and docker-compose
> ---
>
> Key: HDDS-1190
> URL: https://issues.apache.org/jira/browse/HDDS-1190
> Project: Hadoop Distributed Data Store
> Issue Type: Bug
>Reporter: Xiaoyu Yao
>Assignee: Xiaoyu Yao
>Priority: Major
> Attachments: HDDS-1190-docker-hadoop-runner.001.patch,
> HDDS-1190-trunk.001.patch
>
>
> HDDS-1019 changes to use hadoop-runner as base image for ozonesecure
> docker-compose. There are a few issues that need to fixed.
>
> 1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume
> openjdk8 for JAVA_HOME.
>
> 2. The KEYTAB_DIR needs to be quoted with '.
>
> 3. keytab based login failed with Message stream modified (41), [~elek]
> mentioned in HDDS-1019 that we need to add max_renewable_life to
> "docker-image/docker-krb5/krb5.conf" like follows.
> [realms]
> EXAMPLE.COM = \{
> kdc = localhost
> admin_server = localhost
> max_renewable_life = 7d
> }
> Failures:
> {code}
> org.apache.hadoop.security.KerberosAuthException: failure to login: for
> principal: scm/s...@example.com from keytab /etc/security/keytabs/scm.keytab
> javax.security.auth.login.LoginException: Message stream modified (41)
> scm_1 | at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
> scm_1 |
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDDS-1190) Fix jdk 11 issue for ozonesecure base image and docker-compose
[
https://issues.apache.org/jira/browse/HDDS-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiaoyu Yao updated HDDS-1190:
-
Issue Type: Sub-task (was: Bug)
Parent: HDDS-4
> Fix jdk 11 issue for ozonesecure base image and docker-compose
> ---
>
> Key: HDDS-1190
> URL: https://issues.apache.org/jira/browse/HDDS-1190
> Project: Hadoop Distributed Data Store
> Issue Type: Sub-task
>Reporter: Xiaoyu Yao
>Assignee: Xiaoyu Yao
>Priority: Major
> Attachments: HDDS-1190-docker-hadoop-runner.001.patch,
> HDDS-1190-trunk.001.patch
>
>
> HDDS-1019 changes to use hadoop-runner as base image for ozonesecure
> docker-compose. There are a few issues that need to fixed.
>
> 1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume
> openjdk8 for JAVA_HOME.
>
> 2. The KEYTAB_DIR needs to be quoted with '.
>
> 3. keytab based login failed with Message stream modified (41), [~elek]
> mentioned in HDDS-1019 that we need to add max_renewable_life to
> "docker-image/docker-krb5/krb5.conf" like follows.
> [realms]
> EXAMPLE.COM = \{
> kdc = localhost
> admin_server = localhost
> max_renewable_life = 7d
> }
> Failures:
> {code}
> org.apache.hadoop.security.KerberosAuthException: failure to login: for
> principal: scm/s...@example.com from keytab /etc/security/keytabs/scm.keytab
> javax.security.auth.login.LoginException: Message stream modified (41)
> scm_1 | at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
> scm_1 |
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
[jira] [Updated] (HDDS-1190) Fix jdk 11 issue for ozonesecure base image and docker-compose
[
https://issues.apache.org/jira/browse/HDDS-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiaoyu Yao updated HDDS-1190:
-
Attachment: HDDS-1190-trunk.001.patch
> Fix jdk 11 issue for ozonesecure base image and docker-compose
> ---
>
> Key: HDDS-1190
> URL: https://issues.apache.org/jira/browse/HDDS-1190
> Project: Hadoop Distributed Data Store
> Issue Type: Bug
>Reporter: Xiaoyu Yao
>Assignee: Xiaoyu Yao
>Priority: Major
> Attachments: HDDS-1190-trunk.001.patch
>
>
> HDDS-1019 changes to use hadoop-runner as base image for ozonesecure
> docker-compose. There are a few issues that need to fixed.
>
> 1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume
> openjdk8 for JAVA_HOME.
>
> 2. The KEYTAB_DIR needs to be quoted with '.
>
> 3. keytab based login failed with Message stream modified (41), [~elek]
> mentioned in HDDS-1019 that we need to add max_renewable_life to
> "docker-image/docker-krb5/krb5.conf" like follows.
> [realms]
> EXAMPLE.COM = \{
> kdc = localhost
> admin_server = localhost
> max_renewable_life = 7d
> }
> Failures:
> {code}
> org.apache.hadoop.security.KerberosAuthException: failure to login: for
> principal: scm/s...@example.com from keytab /etc/security/keytabs/scm.keytab
> javax.security.auth.login.LoginException: Message stream modified (41)
> scm_1 | at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
> scm_1 |
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
