Re: Keytab issue with Hbase secure

2015-06-01 Thread Yohan Bismuth
Hi, it seems to fix the issue :) However, like Jean Baptiste said, it shouldn"t be a problem in cdh5.4.0. I'll try to dig it a little more. Anyway, thank you Jon On Mon, Jun 1, 2015 at 10:53 AM, Jean-Baptiste Note wrote: > Hi, > > Thanks for the heads up. > > We're running on JDK8, however, it

Re: Keytab issue with Hbase secure

2015-06-01 Thread Jean-Baptiste Note
Hi, Thanks for the heads up. We're running on JDK8, however, it looks like 10786 is in CDH5.4.0 which we're using (and compiled against); see: http://archive.cloudera.com/cdh5/cdh/5/hadoop-2.6.0-cdh5.4.0.releasenotes.html This is so close a problem however that we'll dig in this direction. Kind

Re: Keytab issue with Hbase secure

2015-05-30 Thread Jon Maron
Are you running on JDK 8? Could be this: https://issues.apache.org/jira/browse/HADOOP-10786 > On May 29, 2015, at 9:46 AM, Yohan Bismuth wrote: > > I just recompiled slider after i replaced the call to isFromKeytab() > in validateLoginUser by isLoginKeytabBased(). Then i redeployed it on my >

Re: Keytab issue with Hbase secure

2015-05-29 Thread Jon Maron
I’ll admit to being stumped. Looking for input from others… > On May 29, 2015, at 9:46 AM, Yohan Bismuth wrote: > > I just recompiled slider after i replaced the call to isFromKeytab() > in validateLoginUser by isLoginKeytabBased(). Then i redeployed it on my > gateway and launched my applicati

Re: Keytab issue with Hbase secure

2015-05-29 Thread Yohan Bismuth
I just recompiled slider after i replaced the call to isFromKeytab() in validateLoginUser by isLoginKeytabBased(). Then i redeployed it on my gateway and launched my application. The error is the same as before. On Fri, May 29, 2015 at 3:36 PM, Jon Maron wrote: > Please describe the full procedu

Re: Keytab issue with Hbase secure

2015-05-29 Thread Jon Maron
Please describe the full procedure you used to retest. > On May 29, 2015, at 9:28 AM, Yohan Bismuth wrote: > > ...but i got the same problem using this method instead > > On Fri, May 29, 2015 at 3:25 PM, Yohan Bismuth > wrote: > >> oops my bad, was not looking the good thing >> >> On Fri, Ma

Re: Keytab issue with Hbase secure

2015-05-29 Thread Yohan Bismuth
...but i got the same problem using this method instead On Fri, May 29, 2015 at 3:25 PM, Yohan Bismuth wrote: > oops my bad, was not looking the good thing > > On Fri, May 29, 2015 at 3:13 PM, Jon Maron wrote: > >> It’s declared as public static: >> >> public synchronized static boolean isLogin

Re: Keytab issue with Hbase secure

2015-05-29 Thread Yohan Bismuth
oops my bad, was not looking the good thing On Fri, May 29, 2015 at 3:13 PM, Jon Maron wrote: > It’s declared as public static: > > public synchronized static boolean isLoginKeytabBased() > > at least the version I’m looking at > > > On May 29, 2015, at 8:52 AM, Yohan Bismuth > wrote: > > > > M

Re: Keytab issue with Hbase secure

2015-05-29 Thread Jon Maron
It’s declared as public static: public synchronized static boolean isLoginKeytabBased() at least the version I’m looking at > On May 29, 2015, at 8:52 AM, Yohan Bismuth wrote: > > Mmh I can't compile this. I don't think you can use isLoginKeytabBased() > since isKeytab is private in ugi. > >

Re: Keytab issue with Hbase secure

2015-05-29 Thread Yohan Bismuth
Mmh I can't compile this. I don't think you can use isLoginKeytabBased() since isKeytab is private in ugi. On Fri, May 29, 2015 at 1:56 PM, Jon Maron wrote: > Looks like you’ve found a bug: validateLoginUser should be calling > isLoginKeytabBased(), not isFromKeytab(). Would mind filing a JIRA

Re: Keytab issue with Hbase secure

2015-05-29 Thread Jon Maron
Looks like you’ve found a bug: validateLoginUser should be calling isLoginKeytabBased(), not isFromKeytab(). Would mind filing a JIRA? — Jon > On May 29, 2015, at 5:24 AM, Yohan Bismuth wrote: > > Btw, i've tried using java7 and java8: smae issue. > I'm correctly logged as the principal of m

Re: Keytab issue with Hbase secure

2015-05-29 Thread Jon Maron
That is strange - the login is from a keytab, but the UGI indicates it’s from a ticket. I’ll need to investigate some more. Can you send me the full log? I imagine the listserv will not allow it. Thanks! > On May 29, 2015, at 5:24 AM, Yohan Bismuth wrote: > > Btw, i've tried using java7 an

Re: Keytab issue with Hbase secure

2015-05-29 Thread Yohan Bismuth
Btw, i've tried using java7 and java8: smae issue. I'm correctly logged as the principal of my keytab, and i can submit jobs (like a wordcount) using this keytab. If i remove this line from the code: > validateLoginUser(UserGroupInformation.getLoginUser()); everything seems to work fine. hasKer

Re: Keytab issue with Hbase secure

2015-05-28 Thread Yohan Bismuth
> > I'm using slider 0.80, this code is from here: https://github.com/apache/incubator-slider/blob/releases/slider-0.80.0-incubating/slider-core/src/main/java/org/apache/slider/server/appmaster/SliderAppMaster.java

Re: Keytab issue with Hbase secure

2015-05-28 Thread Jon Maron
hasKerberosCredentials returns true, so the login must be based on a kerberos ticket. Perhaps it has expired? I guess you could a kdestroy followed by kinit… Which slider version are you on? Is that error message at the bottom something you put in the code? I can’t find it in the codebase.

Re: Keytab issue with Hbase secure

2015-05-28 Thread Yohan Bismuth
Yes i did Le 28 mai 2015 19:15, "Jon Maron" a écrit : > Did you actually log in (kinit) prior to invoking the slider client? > You’ll need to do that in order to establish an identity for the AM launch. > > > On May 28, 2015, at 12:59 PM, Yohan Bismuth > wrote: > > > > Hi, > > i'm facing an issu

Re: Keytab issue with Hbase secure

2015-05-28 Thread Jon Maron
Did you actually log in (kinit) prior to invoking the slider client? You’ll need to do that in order to establish an identity for the AM launch. > On May 28, 2015, at 12:59 PM, Yohan Bismuth wrote: > > Hi, > i'm facing an issue with Hbase in secure mode. > I followed the steps described on > h

Keytab issue with Hbase secure

2015-05-28 Thread Yohan Bismuth
Hi, i'm facing an issue with Hbase in secure mode. I followed the steps described on http://slider.incubator.apache.org/docs/security.html i created my headless keytab (and the associated principals), which i deployed on hdfs and when i start an hbase application, the keytab is correctly packaged