[ACCUMULO-3880] Malformed Configuration Causes tservers To Shutdown

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.6.0, 1.6.1, 1.6.2, 1.7.0
• Fix Version/s: 1.6.3, 1.7.0
• Component/s: tserver

Environment

HDP 2.2.7.0 to HDP 2.3.0.0 Upgrade

• Assignee: Josh Elser
• Reporter: Jonathan Hurley
• Created: 01/Jun/15 21:53
• Updated: 04/Oct/19 16:12
• Resolved: 02/Jun/15 16:58

Description

During a rolling upgrade from HDP 2.2 to HDP 2.3, Accumulo tracer fails to start because it is unable to find any tabletservers. The tabletserver were updated to HDP 2.3 earlier in the upgrade process and did come online briefly.

The PID file still exist, but the tservers are definitely down:

[root@c6401 accumulo]# cat accumulo-accumulo-tserver.pid
6075
[root@c6401 accumulo]# ps -a | grep 6075

It seems like the problem might be located in the following piece of code:

    private void checkPermission(TCredentials credentials, String lock, final String request) throws ThriftSecurityException {
      boolean fatal = false;
      try {
        log.trace("Got " + request + " message from user: " + credentials.getPrincipal());
        if (!security.canPerformSystemActions(credentials)) {
          log.warn("Got " + request + " message from user: " + credentials.getPrincipal());
          throw new ThriftSecurityException(credentials.getPrincipal(), SecurityErrorCode.PERMISSION_DENIED);
        }
      } catch (ThriftSecurityException e) {
        log.warn("Got " + request + " message from unauthenticatable user: " + e.getUser());
        if (getCredentials().getToken().getClass().getName().equals(credentials.getTokenClassName())) {
          log.error("Got message from a service with a mismatched configuration. Please ensure a compatible configuration.", e);
          fatal = true;
        }
        throw e;
      } finally {
        if (fatal) {
          Halt.halt(1, new Runnable() {
            @Override
            public void run() {
              gcLogger.logGCInfo(TabletServer.this.getConfiguration());
            }
          });
        }
      }

Where a malformed principal causes a Halt.

From the tserver logs:

2015-06-01 19:25:30,462 [rpc.TServerUtils] DEBUG: Instantiating default, unsecure custom half-async Thrift server
2015-06-01 19:25:30,468 [tserver.TabletServer] INFO : address = c6401.ambari.apache.org:9997
2015-06-01 19:25:30,510 [tserver.TabletServer] INFO : Waiting for tablet server lock

There is also no content in the *.out or *.err files for tserver.

Issue Links

• is broken by: ACCUMULO-1132 Use a concrete implementation of AuthenticationToken for !SYSTEM user