[ https://issues.apache.org/jira/browse/HDFS-12236?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Lantao Jin resolved HDFS-12236. ------------------------------- Resolution: Duplicate Open a {{Hadoop}} issue [HADOOP-14708|https://issues.apache.org/jira/browse/HADOOP-14708] instead this {{HDFS}} > FsckServlet can not create SaslRpcClient with auth KERBEROS_SSL > --------------------------------------------------------------- > > Key: HDFS-12236 > URL: https://issues.apache.org/jira/browse/HDFS-12236 > Project: Hadoop HDFS > Issue Type: Bug > Components: security > Affects Versions: 2.7.3, 2.8.1, 3.0.0-alpha3 > Reporter: Lantao Jin > > FSCK started by xx (auth:KERBEROS_SSL) failed with exception msg "fsck > encountered internal errors!" > FSCK use FSCKServlet to submit RPC to NameNode, it use {{KERBEROS_SSL}} as > its {{AuthenticationMethod}} in {{JspHelper.java}} > {code} > /** Same as getUGI(context, request, conf, KERBEROS_SSL, true). */ > public static UserGroupInformation getUGI(ServletContext context, > HttpServletRequest request, Configuration conf) throws IOException { > return getUGI(context, request, conf, AuthenticationMethod.KERBEROS_SSL, > true); > } > {code} > But when setup SaslConnection with server, KERBEROS_SSL will failed to create > SaslClient instance. See {{SaslRpcClient.java}} > {code} > private SaslClient createSaslClient(SaslAuth authType) > throws SaslException, IOException { > .... > case KERBEROS: { > if (ugi.getRealAuthenticationMethod().getAuthMethod() != > AuthMethod.KERBEROS) { > return null; // client isn't using kerberos > } > {code} -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-dev-h...@hadoop.apache.org